← CVE Intelligence

CVE-2025-53502

HTML injection in FeaturedFeeds PUBLISHED

Description (CNA)

Improper Input Validation vulnerability in Wikimedia Foundation Mediawiki - FeaturedFeeds Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - FeaturedFeeds Extension: 1.39.X, 1.42.X, 1.43.X.

Affected (CNA)

Vendor / productVersions
Wikimedia Foundation / Mediawiki - FeaturedFeeds Extensionaffected 1.39.x; affected 1.42.x; affected 1.43.x

CWE

CWE-20

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.