CVE-2025-53369 in mediawiki-extensions-ShortDescriptionИнформация

Сводка

по MITRE • 03.07.2025

Short Description is a MediaWiki extension that provides local short description support. In version 4.0.0, short descriptions are not properly sanitized before being inserted as HTML using mw.util.addSubtitle, allowing any user to insert arbitrary HTML into the DOM by editing a page. This issue has been patched in version 4.0.1.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Ответственный

GitHub M

Резервировать

27.06.2025

Раскрытие

03.07.2025

Модерация

принято

Вход

VDB-314828

EPSS

0.00289

KEV

Нет

Деятельности

Очень низкий

Источники

Do you want to use VulDB in your project?

Use the official API to access entries easily!