VYPR
Get started
← All advisories
Medium severity6.1NVD Advisory· Published Feb 3, 2026· Updated Apr 9, 2026

CVE-2025-67483

CVE-2025-67483

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Page.Preview.Js.

This issue affects MediaWiki: from * before 1.43.6, 1.44.3, 1.45.1.

Affected products

2
  • MediaWiki/Mediawiki2 versions
    cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*range: >=1.43.0,<1.43.6
    • cpe:2.3:a:mediawiki:mediawiki:1.45.0:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.