CVE-2025-32069 — Wikitext stored XSS on filepages due to dangerous WBMI serialization

CVE-2025-32069

Wikitext stored XSS on filepages due to dangerous WBMI serialization PUBLISHED

Description (CNA)

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Wikibase Media Info Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Wikibase Media Info Extension: from 1.39 through 1.43.

Affected (CNA)

Vendor / product	Versions
The Wikimedia Foundation / Mediawiki - Wikibase Media Info Extension	affected 1.39 through 1.43

CWE

CWE-20

References

https://phabricator.wikimedia.org/T387691
https://gerrit.wikimedia.org/r/q/Ie969a8cfeab0d4457417773fa884e271968e5657

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.