PT-2025-28214 · Mediawiki+1 · Mediawiki+1
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions:
Mediawiki - RelatedArticles Extension versions 1.43.X through 1.43.1
Description:
The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS attacks.
Recommendations:
For Mediawiki - RelatedArticles Extension versions 1.43.X through 1.43.1, update to version 1.43.2 or later to resolve the issue.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Mediawiki
Relatedarticles Extension