CVE-2025-32070: XSSes in AJAXPoll
Published Apr 11, 2025
·Updated
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - AJAX Poll Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - AJAX Poll Extension: from 1.39 through 1.43.
Affected Software
1 affected component
Wikimedia Foundation Mediawiki - AJAX Poll Extension>=1.39<=1.43
Event History
Apr 11, 2025
CVE Published
via MITRE·04:20 PM
Data Sourced
via MITRE·04:20 PM
DescriptionWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Aug 27, 57485
Event
via NVD·01:10 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-32070?
CVE-2025-32070 is classified as a Cross-Site Scripting (XSS) vulnerability due to improper input validation.
2
How do I fix CVE-2025-32070?
To fix CVE-2025-32070, update the Mediawiki - AJAX Poll Extension to a version later than 1.43.
3
What versions of Mediawiki - AJAX Poll Extension are affected by CVE-2025-32070?
CVE-2025-32070 affects Mediawiki - AJAX Poll Extension versions from 1.39 to 1.43.
4
What type of vulnerability is CVE-2025-32070?
CVE-2025-32070 is an Improper Input Validation vulnerability that allows for Cross-Site Scripting (XSS) attacks.
5
Who is the vendor associated with CVE-2025-32070?
The vendor associated with CVE-2025-32070 is Wikimedia Foundation.