PT-2025-16141

CVE-2025-32077

·

Published

2025-04-11

·

Updated

2025-04-11

Description by

CVSS 4.0
6.9
Medium
MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N
Name of the Vulnerable Software and Affected Versions: Mediawiki - Extension:SimpleCalendar versions 1.39 through 1.43
Description: The issue is related to an Improper Input Validation vulnerability that allows Cross-Site Scripting (XSS) in the Mediawiki - Extension:SimpleCalendar.
Recommendations: For versions 1.39 through 1.43, update to a version that includes the fix for the Improper Input Validation vulnerability to prevent Cross-Site Scripting (XSS) attacks.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-20: Improper Input Validation
Related identifiers
CVE-2025-32077
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com