CVE-2025-23078

Name of the Vulnerable Software and Affected Versions Mediawiki - Breadcrumbs2 extension versions 1.39.X through 1.39.11 Mediawiki - Breadcrumbs2 extension versions 1.41.X through 1.41.5 Mediawiki - Breadcrumbs2 extension versions 1.42.X through 1.42.4

Description The issue is related to improper neutralization of input during web page generation, allowing Cross-Site Scripting (XSS). This enables attackers to inject malicious scripts into web pages, potentially leading to unauthorized actions or data theft.

Recommendations For versions 1.39.X through 1.39.11, update to a version after 1.39.11 to resolve the issue. For versions 1.41.X through 1.41.5, update to a version after 1.41.5 to resolve the issue. For versions 1.42.X through 1.42.4, update to a version after 1.42.4 to resolve the issue. As a temporary workaround, consider restricting access to the Breadcrumbs2 extension until a patch is available.