CVE-2025-7056: Stored XSS in UrlShortener
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - UrlShortener Extension allows Stored XSS.This issue affects Mediawiki - UrlShortener Extension: from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7056?
CVE-2025-7056 has a high severity due to its potential for allowing stored cross-site scripting (XSS) attacks.
How do I fix CVE-2025-7056?
To fix CVE-2025-7056, upgrade the Mediawiki - UrlShortener Extension to version 1.42.7 or 1.43.3 and above.
What versions of Mediawiki - UrlShortener Extension are affected by CVE-2025-7056?
CVE-2025-7056 affects Mediawiki - UrlShortener Extension versions from 1.42.0 to below 1.42.7 and from 1.43.0 to below 1.43.3.
What type of vulnerability is CVE-2025-7056?
CVE-2025-7056 is an improper neutralization of input during web page generation, leading to stored cross-site scripting (XSS).
Who is impacted by CVE-2025-7056?
Users and administrators of the affected versions of the Mediawiki - UrlShortener Extension are impacted by CVE-2025-7056, as it can lead to security breaches.