CVE-2025-53502

CVE-2025-53502: HTML injection in FeaturedFeeds

Vendor Wikimedia Foundation
Product Mediawiki - FeaturedFeeds Extension
Weakness CWE-20 · Input validation
Published July 3, 2025
Last update July 10, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper Input Validation vulnerability in Wikimedia Foundation Mediawiki - FeaturedFeeds Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - FeaturedFeeds Extension: 1.39.X, 1.42.X, 1.43.X.

Key dates

02Disclosure timeline

July 3, 2025 CVE published
July 10, 2025 Record updated