CNNVD-202510-2444 Information

CNNVD ID

CNNVD-202510-2444

CVE-2025-62653

  • CNNVD Published: 2025-10-17

Description (Chinese)

Mediawiki - PollNY Extension是Mediawiki开源的一个外观插件。 Mediawiki - PollNY Extension 1.39版本、1.43版本和1.44版本存在安全漏洞,该漏洞源于网页生成期间输入中和不当,可能导致存储型跨站脚本攻击。

Description (English)

Mediawiki - PollNY Extension is an open-source side plugin for Mediawiki. Mediawiki-PollNY Extension 1.39, 1.43 and 1.44 have a security loophole, which stems from the inaccuracy of input during web page generation and may result in a storage-type cross-site script attack.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

维基媒体

Published

2025-10-17

Last Modified

2026-02-24

References

https://phabricator.wikimedia.org/T403923 https://access.redhat.com/security/cve/cve-2025-62653

Patch

https://phabricator.wikimedia.org/T403923

Share on: