Skip to content
OpenAdvisories

Product · Wikimedia Foundation

Parsoid

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • None 0.0
    CVE-2025-61638 Public exploit

    Sanitizer::validateAttributes data-XSS

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Parsoid. This vulnerability is associated with program files includes/parser/Sanitizer.Php, src/C…

    Wikimedia Foundation MediaWiki Parsoid mediawiki Web / CMS Debian Ubuntu