Cross-site Scripting Vulnerability in Wikimedia Foundation MediaWiki

CVE-2025-3469

What is CVE-2025-3469?

A Cross-site Scripting (XSS) vulnerability exists in Wikimedia Foundation's MediaWiki software due to improper neutralization of input during web page generation. Attackers can exploit this flaw by crafting malicious input that is then processed by the affected application, potentially allowing them to inject arbitrary scripts into web pages viewed by other users. This vulnerability affects various versions of MediaWiki, specifically those before 1.39.12, as well as versions 1.42.6 and 1.43.1. Users are encouraged to upgrade to the latest version to mitigate the risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References