None severityNVD Advisory· Published Feb 3, 2026· Updated Apr 15, 2026
CVE-2025-61657
CVE-2025-61657
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Vector. This vulnerability is associated with program files resources/skins.Vector.Js/stickyHeader.Js.
This issue affects Vector: from * before 1.43.4, 1.44.1.
Affected products
1- Range: <1.43.4, >=1.44.0,<1.44.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.