None severityNVD Advisory· Published Feb 2, 2026· Updated Jun 17, 2026
CVE-2025-6596
CVE-2025-6596
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Vector. This vulnerability is associated with program files resources/skins.Vector.Js/portlets.Js, resources/skins.Vector.Legacy.Js/portlets.Js.
This issue affects Vector: from >= 1.40.0 before 1.42.7, 1.43.2, 1.44.0.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: >=1.40.0,<1.42.7,>=1.43.0,<1.43.2,>=1.44.0
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.