medium5.4
CVE-2025-32071
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Wikidata Extension allows Cross-Site Scripting (XSS) from widthheight message v…
Impact
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Wikidata Extension allows Cross-Site Scripting (XSS) from widthheight message via ImageHandler::getDimensionsString()This issue affects Mediawiki - Wikidata Extension: from 1.39 through 1.43.
Affected products
| Product | Affected versions |
|---|---|
| Mediawiki - Wikidata Extension: From 1.39 | through 1.43. |
Versions were read from the advisory text. No structured product data has been published for this record yet.