Stored XSS Vulnerability in Wikimedia Foundation Mediawiki - TwoColConflict Extension

CVE-2025-53494

What is CVE-2025-53494?

A stored Cross-site Scripting (XSS) vulnerability in the TwoColConflict extension of the Mediawiki platform allows an attacker to inject malicious scripts into web pages, which could be executed in the context of users visiting those pages. This issue arises due to improper neutralization of user input during web page generation, affecting versions prior to the specified patches. It is crucial for users of this extension to update to the fixed versions to mitigate potential security threats.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References