Cross-Site Scripting Vulnerability in MediaWiki by Wikimedia Foundation

CVE-2025-11261

What is CVE-2025-11261?

A Cross-Site Scripting (XSS) vulnerability exists in MediaWiki, a software platform developed by Wikimedia Foundation, allowing attackers to inject malicious scripts into web pages. This vulnerability arises from improper neutralization of user input during web page generation, specifically affecting versions prior to 1.39.15, as well as 1.43.5 and 1.44.2. Successful exploitation could result in unauthorized access or malicious actions executed in the context of users' sessions. Organizations using affected MediaWiki versions are urged to implement appropriate mitigations and update to secure releases.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References