CVE-2025-61657: XSS
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Vector. This vulnerability is associated with program files resources/skins.Vector.Js/stickyHeader.Js.
This issue affects Vector: from before 1.43.4, 1.44.1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-61657?
CVE-2025-61657 is classified as a medium severity vulnerability due to improper neutralization of input, leading to potential XSS attacks.
How do I fix CVE-2025-61657?
To fix CVE-2025-61657, upgrade to Wikimedia Foundation Vector version 1.43.4 or later.
Which versions of Wikimedia Foundation Vector are affected by CVE-2025-61657?
CVE-2025-61657 affects Wikimedia Foundation Vector versions prior to 1.43.4 and 1.44.1.
What kind of vulnerability is CVE-2025-61657?
CVE-2025-61657 is a Cross-Site Scripting (XSS) vulnerability due to improper neutralization of input.
What are the potential impacts of CVE-2025-61657?
Exploiting CVE-2025-61657 could allow attackers to execute arbitrary scripts in the context of users' browsers, potentially leading to data theft or session hijacking.