Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-53502 EUVD-2025-19888GHSA-h639-qx2x-fm8f

HTML injection in FeaturedFeeds

Published Jul 3, 2025 · Updated Jul 10, 2025 · Assigned by wikimedia-foundation

Description

Improper Input Validation vulnerability in Wikimedia Foundation Mediawiki - FeaturedFeeds Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - FeaturedFeeds Extension: 1.39.X, 1.42.X, 1.43.X.

Affected products

VendorProductAffectedFixed
Wikimedia Foundation Mediawiki - FeaturedFeeds Extension 1.39.x, 1.42.x, 1.43.x —

Advisories 1

References