Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-53482 EUVD-2025-20083GHSA-c8vc-jj39-hw4x

IPInfo: Message key XSS through several IPInfo messages in infobox and popup

Published Jul 4, 2025 · Updated Jul 8, 2025 · Assigned by wikimedia-foundation

Vendor: Wikimedia Foundation Product: Mediawiki - IPInfo Extension Category: Web / CMS

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - IPInfo Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - IPInfo Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.

Affected products

VendorProductAffectedFixed
Wikimedia Foundation Mediawiki - IPInfo Extension 1.39.x – < 1.39.13, 1.42.x – < 1.42.7, 1.43.x – < 1.43.2 1.39.13

Advisories 1

References