CNNVD-202507-1160 Information

CNNVD ID

CNNVD-202507-1160

Related CVE

CVE-2025-7363

• CNNVD Published: 2025-07-08

Description (Chinese)

Wikimedia Mediawiki - TitleIcon extension是Wikimedia基金会的一个标题图标扩展。 Wikimedia Mediawiki - TitleIcon extension 1.39.13之前版本、1.42.7之前版本和1.43.2之前版本存在安全漏洞，该漏洞源于#titleicon_unicode解析函数未经清理导致存储型跨站脚本。

Description (English)

Wikimedia Mediawiki - TitleIcon extension is an extension of the Wikimedia Foundation ’ s title icon. Wikimedia Mediawiki-TitleIcon extension 1.39.13, 1.42.7 and 1.43.2 have a security loophole, which originates from the uncleaned #titleicon unicode resolution function, which results in storage-type cross-site scripts.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

维基媒体

Published

2025-07-08

Last Modified

2026-02-24

References

https://gerrit.wikimedia.org/r/q/I2e8c73445172679634f6ec64d37cf82507dfa110 https://gerrit.wikimedia.org/r/q/I107ab638fecbf52b5bec3f02726ed24b1ae74429 https://phabricator.wikimedia.org/T394721 https://access.redhat.com/security/cve/cve-2025-7363

Patch

https://www.mediawiki.org/wiki/Special:ExtensionDistributor/TitleIcon