CVE-2025-32069: Wikitext stored XSS on filepages due to dangerous WBMI serialization
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Wikibase Media Info Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Wikibase Media Info Extension: from 1.39 through 1.43.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-32069?
CVE-2025-32069 is classified as a high severity vulnerability due to its potential for Cross-Site Scripting (XSS) attacks.
How do I fix CVE-2025-32069?
To fix CVE-2025-32069, update the Wikimedia Foundation Mediawiki - Wikibase Media Info Extension to version 1.44 or later.
What versions of Mediawiki - Wikibase Media Info Extension are affected by CVE-2025-32069?
CVE-2025-32069 affects Mediawiki - Wikibase Media Info Extension versions 1.39 through 1.43.
What is the nature of the vulnerability described in CVE-2025-32069?
CVE-2025-32069 involves improper input validation that leads to vulnerabilities allowing Cross-Site Scripting (XSS).
Who is responsible for the CVE-2025-32069 vulnerability?
CVE-2025-32069 was identified in the Wikimedia Foundation Mediawiki - Wikibase Media Info Extension.