PT-2025-42563 · Wikimedia Foundation+3 · Mediawiki
CVE-2025-61645
·
Published
2025-10-07
·
Updated
2026-02-03
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
MediaWiki versions prior to 1.44.1
Description
A flaw exists in MediaWiki related to improper input handling during web page generation, potentially leading to Cross-site Scripting (XSS). The issue is located in the
CodexTablePager.Php file.Recommendations
Update to MediaWiki version 1.44.1 or later.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Mediawiki