CVE-2025-53500

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-53500
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-53500.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-53500
Published
2025-07-03T17:15:39.990Z
Modified
2025-11-17T04:02:12.256050Z
Severity
  • 5.6 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
Summary
[none]
Details

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - MassEditRegex Extension allows Stored XSS.This issue affects Mediawiki - MassEditRegex Extension: from 1.39.X before 1.39.12, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.

References

Affected packages

Git / github.com/wikimedia/mediawiki

Affected ranges

Type
GIT
Repo
https://github.com/wikimedia/mediawiki
Events

Affected versions

1.*

1.39.0
1.39.1
1.39.10
1.39.11
1.39.2
1.39.3
1.39.4
1.39.5
1.39.6
1.39.7
1.39.8
1.39.9