Cross-Site Scripting Vulnerability in Wikimedia Foundation’s Mediawiki - MintyDocs Extension

CVE-2025-53493

What is CVE-2025-53493?

The vulnerability in the Wikimedia Foundation’s Mediawiki - MintyDocs Extension arises from improper neutralization of input during web page generation, allowing an attacker to execute arbitrary scripts in the context of a user's session. This can lead to stored XSS attacks, where malicious scripts are saved and executed, potentially compromising user data and web application integrity. Users on versions 1.39.X, 1.42.X, and all versions prior to 1.43.2 should take immediate action to safeguard their applications against this issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References