VYPR

Mediawiki Extensions Wikicategorytagcloud

by Wikimedia Foundation

Source repositories

CVEs (1)

  • CVE-2025-53486MedJul 7, 2025
    risk 0.35cvss 5.4epss 0.00

    The WikiCategoryTagCloud extension is vulnerable to reflected XSS via the linkstyle attribute, which is improperly concatenated into inline HTML without escaping. An attacker can inject JavaScript event handlers such as onmouseenter using carefully crafted input via the…