High severity8.8NVD Advisory· Published Jul 4, 2025· Updated Apr 15, 2026
CVE-2025-53483
CVE-2025-53483
Description
ArchivePage.php, UnarchivePage.php, and VoterEligibilityPage#executeClear() do not validate request methods or CSRF tokens, allowing attackers to trigger sensitive actions if an admin visits a malicious site.
This issue affects Mediawiki - SecurePoll extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: >= 1.39, < 1.39.13 | >= 1.42, < 1.42.7 | >= 1.43, < 1.43.2
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.