CVE-2025-53369 in mediawiki-extensions-ShortDescriptioninformação

Sumário

de MITRE • 03/07/2025

Short Description is a MediaWiki extension that provides local short description support. In version 4.0.0, short descriptions are not properly sanitized before being inserted as HTML using mw.util.addSubtitle, allowing any user to insert arbitrary HTML into the DOM by editing a page. This issue has been patched in version 4.0.1.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Responsável

GitHub M

Reservar

27/06/2025

Divulgação

03/07/2025

Moderação

aceite

Entrada

VDB-314828

CPE

pronto

EPSS

0.00289

KEV

não

Atividades

muito baixo

Fontes

Interested in the pricing of exploits?

See the underground prices here!