Cross-site Scripting Vulnerability in Wikimedia Foundation Mediawiki - RelatedArticles Extension

CVE-2025-53497

What is CVE-2025-53497?

A Cross-site Scripting vulnerability exists in the Wikimedia Foundation Mediawiki - RelatedArticles Extension, which allows for the execution of malicious scripts. This issue arises from improper neutralization of input during web page generation, potentially leading to Stored XSS attacks. The vulnerability affects versions of the Mediawiki - RelatedArticles Extension before 1.43.2, posing risks to web application security.

References