Skip to content
OpenAdvisories

Vendor

lakejason0

1 known vulnerabilities.

Products

mediawiki-skins-Lakeus 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.7
    CVE-2025-25287

    Lakeus vulnerable to stored XSS via system messages

    Lakeus is a simple skin made for MediaWiki. Starting in version 1.0.8 and prior to versions 1.3.1+REL1.39, 1.3.1+REL1.42, and 1.4.0, Lakeus is vulnerable to store cross-site scripting via malicious system messages, though editing the messages requires high pr…

    lakejason0 mediawiki-skins-Lakeus Web / CMS