CVE-2025-32073

State: PUBLISHED · Published: 2025-04-11 · Updated: 2025-07-07 · Assigner: wikimedia-foundation

Description

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - HTML Tags allows Cross-Site Scripting (XSS).This issue affects Mediawiki - HTML Tags: from 1.39 through 1.43.

CWE

CWE-20 — CWE-20 Improper Input Validation

Affected

The Wikimedia Foundation / Mediawiki - HTML Tags — v=1.39 ≤1.43 [affected]

CVSS

(none)

References

https://phabricator.wikimedia.org/T386337
https://gerrit.wikimedia.org/r/c/mediawiki/extensions/HTMLTags/+/1121056

Source

cvelistV5-main/cves/2025/32xxx/CVE-2025-32073.json