CVE-2025-53490: Multiple XSS in CampaignEvents
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - CampaignEvents Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - CampaignEvents Extension: from 1.43.X before 1.43.2.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2025-53490?
CVE-2025-53490 has a medium severity rating due to its potential for allowing cross-site scripting (XSS) attacks.
How do I fix CVE-2025-53490?
To fix CVE-2025-53490, update the Mediawiki - CampaignEvents Extension to version 1.43.2 or later.
What is the impact of CVE-2025-53490?
The impact of CVE-2025-53490 can lead to unauthorized script execution in the context of the user’s browser.
Which versions are affected by CVE-2025-53490?
CVE-2025-53490 affects Mediawiki - CampaignEvents Extension versions prior to 1.43.2 in the 1.43.X series.
What type of vulnerability is CVE-2025-53490?
CVE-2025-53490 is classified as a Cross-Site Scripting (XSS) vulnerability.