Cross-Site Scripting Vulnerability in Mediawiki - Version Compare by Wikimedia Foundation

CVE-2025-32078

Summary

A vulnerability exists in the Mediawiki - Version Compare Extension developed by the Wikimedia Foundation, allowing for Cross-Site Scripting (XSS). This flaw occurs due to improper encoding or escaping of output, affecting versions from 1.39 through 1.43. Malicious actors could exploit this vulnerability to inject arbitrary scripts into web pages viewed by users, potentially compromising the integrity and confidentiality of user data. It is crucial to address this security issue to protect users from possible attacks.

References