CNNVD-202507-772 Information

CNNVD ID

CNNVD-202507-772

CVE-2025-53488

  • CNNVD Published: 2025-07-07

Description (Chinese)

Wikimedia Mediawiki - WikiHiero Extension是Wikimedia基金会的一个显示和编辑古埃及象形文字的扩展。 Wikimedia Mediawiki - WikiHiero Extension 1.43.2之前版本存在安全漏洞,该漏洞源于输入中和不当,可能导致存储型跨站脚本攻击。

Description (English)

Wikimedia Mediawiki - WikiHiero Extension is an extension of Wikimedia Foundation to display and edit ancient Egyptian hieroglyphics. Wikimedia Mediawiki - WikiHiero Exportation 1.43.2 contains a security loophole, which originates from inappropriate input and may result in a storage-type cross-station script attack.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

维基媒体

Published

2025-07-07

Last Modified

2026-02-24

References

https://gerrit.wikimedia.org/r/c/mediawiki/extensions/wikihiero/+/1166018 https://phabricator.wikimedia.org/T396524 https://access.redhat.com/security/cve/cve-2025-53488

Patch

https://www.mediawiki.org/wiki/Extension:WikiHiero

Share on: