Cross-Site Scripting Vulnerability in Mediawiki - Version Compare by Wikimedia Foundation

CVE-2025-32078

What is CVE-2025-32078?

A vulnerability exists in the Mediawiki - Version Compare Extension developed by the Wikimedia Foundation, allowing for Cross-Site Scripting (XSS). This flaw occurs due to improper encoding or escaping of output, affecting versions from 1.39 through 1.43. Malicious actors could exploit this vulnerability to inject arbitrary scripts into web pages viewed by users, potentially compromising the integrity and confidentiality of user data. It is crucial to address this security issue to protect users from possible attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References