Medium severity6.5NVD Advisory· Published Jul 2, 2025· Updated Jun 17, 2026
CVE-2025-53494
CVE-2025-53494
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - TwoColConflict Extension allows Stored XSS.This issue affects Mediawiki - TwoColConflict Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:wmde-fisch:twocolconflict:*:*:*:*:*:mediawiki:*:*Range: <2025-05-26
from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2+ 1 more
- (no CPE)range: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2
- (no CPE)range: 1.39.x
Patches
Vulnerability mechanics
References
2- gerrit.wikimedia.org/r/c/mediawiki/extensions/TwoColConflict/+/1150011nvdPatch
- phabricator.wikimedia.org/T394938nvdExploitIssue Tracking
News mentions
0No linked articles in our index yet.