Cross-Site Scripting Vulnerability in Mediawiki CampaignEvents Extension by Wikimedia Foundation

CVE-2025-53490

What is CVE-2025-53490?

The Mediawiki - CampaignEvents Extension by Wikimedia Foundation contains a Cross-Site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation. This vulnerability enables attackers to inject malicious scripts into web pages viewed by users, potentially leading to session hijacking, defacement, or redirection to malicious sites. This issue affects versions of the extension prior to 1.43.2.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References