Medium severity5.6NVD Advisory· Published Jul 3, 2025· Updated Jun 17, 2026
CVE-2025-53489
CVE-2025-53489
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - GoogleDocs4MW Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - GoogleDocs4MW Extension: from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
41.42.x+ 1 more
- (no CPE)range: 1.42.x
- (no CPE)range: from 1.42.X before 1.42.7, from 1.43.X before 1.43.2
- cpe:2.3:a:jackphoenix:googledocs4mw:-:*:*:*:*:mediawiki:*:*
- Range: from 1.42.X before 1.42.7, from 1.43.X before 1.43.2
Patches
Vulnerability mechanics
References
2- gerrit.wikimedia.org/r/c/mediawiki/extensions/GoogleDocs4MW/+/1155269nvdPatch
- phabricator.wikimedia.org/T395949nvdIssue TrackingPatch
News mentions
0No linked articles in our index yet.