CVE-2025-32074

Name of the Vulnerable Software and Affected Versions: Mediawiki - Confirm Account Extension versions 1.39 through 1.43

Description: The issue is related to improper encoding or escaping of output, which enables Cross-Site Scripting (XSS) in the Mediawiki - Confirm Account Extension. This is due to an output escaping issue.

Recommendations: For versions 1.39 through 1.43, consider disabling the affected extension until a patch is available to prevent Cross-Site Scripting (XSS) attacks. Restrict access to sensitive areas of the application that utilize the Confirm Account Extension to minimize the risk of exploitation.