Cross-Site Scripting Vulnerability in Wikimedia Foundation’s Mediawiki - MintyDocs Extension

CVE-2025-53493

What is CVE-2025-53493?

The vulnerability in the Wikimedia Foundation’s Mediawiki - MintyDocs Extension arises from improper neutralization of input during web page generation, allowing an attacker to execute arbitrary scripts in the context of a user's session. This can lead to stored XSS attacks, where malicious scripts are saved and executed, potentially compromising user data and web application integrity. Users on versions 1.39.X, 1.42.X, and all versions prior to 1.43.2 should take immediate action to safeguard their applications against this issue.

References