MediaWiki Extensions and Skins Security Release Supplement (1.39.13/1.42.7/1.43.2)
Manfredi Martorana <[email protected]> Wed, 9 Jul 2025 18:53:41 +0200
| Newsgroups | gmane.org.wikimedia.mediawiki,gmane.science.linguistics.wikipedia.technical |
|---|---|
| Message-ID | <CAKR_POcmaC60KzCGJGzOFQ7x23MtBXMdNY0k6wp4rtdj-qA=jQ@mail.gmail.com> |
--===============7160127627351417428== Content-Type: multipart/alternative; boundary="000000000000ecefc8063981eb3a" --000000000000ecefc8063981eb3a Content-Type: text/plain; charset="UTF-8" Greetings- With the security/maintenance release of MediaWiki 1.39.13/1.42.7/1.43.2, we would also like to provide this supplementary announcement of MediaWiki extensions and skins with now-public Phabricator tasks, security patches and backports [1]: ManageWiki + ( https://github.com/miraheze/ManageWiki/security/advisories/GHSA-gg42-cv66-f5x7, CVE-2025-32956) - SQL injection vulnerability in NamespaceMigrationJob https://github.com/miraheze/ManageWiki/commit/f504ed8eeb59b57ebb90f93cd44f23da4c5bc4c9 IPInfo + (T392976 <https://phabricator.wikimedia.org/T392976>, CVE-2025-53481) - Denial of service vector on ipinfo/v0/norevision https://gerrit.wikimedia.org/r/q/I474b7a1b3bc1e7597fee0826a18a0cf042359f0f IPInfo + (T392976 <https://phabricator.wikimedia.org/T392976>, CVE-2025-53481) - Denial of service vector on ipinfo/v0/norevision https://gerrit.wikimedia.org/r/q/I08a7154f8fa08bb6f0940e522075bdc2a3d4433f IPInfo + (T394393 <https://phabricator.wikimedia.org/T394393>, CVE-2025-53482) - IPInfo: Message key XSS through several IPInfo messages in infobox and popup https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/1146685 IPInfo + (T394393 <https://phabricator.wikimedia.org/T394393>, CVE-2025-53482) - IPInfo: Message key XSS through several IPInfo messages in infobox and popup https://gerrit.wikimedia.org/r/q/Ibb9b7dcb04f551a3da32e9de09a8ac11caa2a3aa SecurePoll + (T392341 <https://phabricator.wikimedia.org/T392341>, CVE-2025-53483) - SecurePoll is vulnerable to XSS, CSRF, and lack of authorisation https://gerrit.wikimedia.org/r/c/mediawiki/extensions/SecurePoll/+/1149618 SecurePoll + (T392341 <https://phabricator.wikimedia.org/T392341>, CVE-2025-53484) - SecurePoll is vulnerable to XSS, CSRF, and lack of authorisation https://gerrit.wikimedia.org/r/q/I5fb4da635b538b6ef121ae77d9088737fd8bf0de SecurePoll + (T392341 <https://phabricator.wikimedia.org/T392341>, CVE-2025-53483) - SecurePoll is vulnerable to XSS, CSRF, and lack of authorisation https://gerrit.wikimedia.org/r/q/I7a771f81cc72bd5c6242767cf3f5e19fa140accc SecurePoll + (T392341 <https://phabricator.wikimedia.org/T392341>, CVE-2025-53485) - SecurePoll is vulnerable to XSS, CSRF, and lack of authorisation https://gerrit.wikimedia.org/r/q/Iaaae70289464b8f097ff8d2d6c828ddf942d2d60 SecurePoll + (T392341 <https://phabricator.wikimedia.org/T392341>, CVE-2025-53484) - SecurePoll is vulnerable to XSS, CSRF, and lack of authorisation https://gerrit.wikimedia.org/r/q/Id6e0c8c3020c293460010ef0019bc6c40d43b596 WikiCategoryTagCloud + (T394590 <https://phabricator.wikimedia.org/T394590>, CVE-2025-53486) - Reflected XSS in WikiCategoryTagCloud https://gerrit.wikimedia.org/r/q/Idd68cf2372aedd916687d30b1bd09ebb48fcfd17 ApprovedRevs + (T394383 <https://phabricator.wikimedia.org/T394383>, CVE-2025-53487) - Stored XSS through system messages in Extension:ApprovedRevs https://gerrit.wikimedia.org/r/q/Ifcab085111e7898da485a5e2ae287fee4e6d167b CheckUser + (T394692 <https://phabricator.wikimedia.org/T394692>, CVE-2025-53478) - Special:Investigate 'IPs and User agents' tab has i18n XSS vectors https://gerrit.wikimedia.org/r/q/I3a1e21b6800ff4d813a33ee9fe9b7ccf070b6b2e CheckUser + (T394693 <https://phabricator.wikimedia.org/T394693>, CVE-2025-53479) - Special:CheckUser has i18n XSS vectors https://gerrit.wikimedia.org/r/q/I159e14543912cb3bc7f4a00c3090c0285b154786 CheckUser + (T394700 <https://phabricator.wikimedia.org/T394700>, CVE-2025-53480) - Special:Investigate 'Account information' tab has i18n XSS vectors https://gerrit.wikimedia.org/r/q/I777fc55fef15c3b00df0db268af2b64cb2d6e381 MsUpload + (T394864 <https://phabricator.wikimedia.org/T394864>, CVE-2025-7362) - Stored XSS through a system message in MsUpload https://gerrit.wikimedia.org/r/q/Icf4c0a5a936926ea887ca2e48c3a7bd297201d9f TitleIcon + (T394721 <https://phabricator.wikimedia.org/T394721>, CVE-2025-7363) - XSS in TitleIcon https://gerrit.wikimedia.org/r/q/I107ab638fecbf52b5bec3f02726ed24b1ae74429 TwoColConflict + (T394938 <https://phabricator.wikimedia.org/T394938>, CVE-2025-53494) - Stored XSS in TwoColConflict https://gerrit.wikimedia.org/r/c/mediawiki/extensions/TwoColConflict/+/1150011 MintyDocs + (T395376 <https://phabricator.wikimedia.org/T395376>, CVE-2025-53493) - Stored XSS in MintyDocs https://gerrit.wikimedia.org/r/c/mediawiki/extensions/MintyDocs/+/1151800 MintyDocs + (T395737 <https://phabricator.wikimedia.org/T395737>, CVE-2025-53492) - Stored XSS in MintyDocs https://gerrit.wikimedia.org/r/c/mediawiki/extensions/MintyDocs/+/1152771 FlaggedRevs + (T394397 <https://phabricator.wikimedia.org/T394397>, CVE-2025-53491) - Stored XSS in FlaggedRevs https://gerrit.wikimedia.org/r/c/mediawiki/extensions/FlaggedRevs/+/1165929 CampaignEvents + (T395622 <https://phabricator.wikimedia.org/T395622>, CVE-2025-53490) - Multiple XSS in CampaignEvents https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CampaignEvents/+/1165949 GoogleDocs4MW + (T395949 <https://phabricator.wikimedia.org/T395949>, CVE-2025-53489) - XSS in GoogleDocs4MW https://gerrit.wikimedia.org/r/c/mediawiki/extensions/GoogleDocs4MW/+/1155269 wikihiero + (T396524 <https://phabricator.wikimedia.org/T396524>, CVE-2025-53488) - Stored XSS in WikiHiero https://gerrit.wikimedia.org/r/c/mediawiki/extensions/wikihiero/+/1166018 RelatedArticles + (T396413 <https://phabricator.wikimedia.org/T396413>, CVE-2025-53497) - Stored XSS in RelatedArticles https://gerrit.wikimedia.org/r/c/mediawiki/extensions/RelatedArticles/+/1166024 MediaSearch + (T396946 <https://phabricator.wikimedia.org/T396946>, CVE-2025-53496) - Stored XSS in MediaSearch https://gerrit.wikimedia.org/r/c/mediawiki/extensions/MediaSearch/+/1166030 AbuseFilter + (T396750 <https://phabricator.wikimedia.org/T396750>, CVE-2025-53495) - Unauthorized Disclosure of IP Reputation in AbuseFilter https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/1166040 AbuseFilter + (T397196 <https://phabricator.wikimedia.org/T397196>, CVE-2025-53499) - Unauthorized Inspection of Protected Variables in AbuseFilter https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/1166045 AbuseFilter + (T397221 <https://phabricator.wikimedia.org/T397221>, CVE-2025-53498) - Lack of Audit Logging in AbuseFilter https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/1166844 FeaturedFeeds + (T392279 <https://phabricator.wikimedia.org/T392279>, CVE-2025-53502) - HTML injection in FeaturedFeeds https://gerrit.wikimedia.org/r/c/mediawiki/extensions/FeaturedFeeds/+/1149742 Scribunto + (T397524 <https://phabricator.wikimedia.org/T397524>, CVE-2025-53501) - Content Access Bypass in Scribunto https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Scribunto/+/1164541 MassEditRegex + (T397334 <https://phabricator.wikimedia.org/T397334>, CVE-2025-53500) - Stored XSS in MassEditRegex https://gerrit.wikimedia.org/r/c/mediawiki/extensions/MassEditRegex/+/1163878 CentralAuth + (T389010 <https://phabricator.wikimedia.org/T389010>, CVE-2025-6926) - Security Authentication Bypass in CentralAuth https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1165117 ManageWiki + ( https://github.com/miraheze/ManageWiki/security/advisories/GHSA-ccrf-x5rp-gppr, CVE-2025-32964) - ManageWiki Vulnerable To Permission Bypass When Disabling Extensions Requiring Certain Permissions In Special:ManageWiki/Extensions https://github.com/miraheze/ManageWiki/commit/00bebea43a3e3ff0157b5f04df17c1d1e88a9acd ManageWiki + ( https://github.com/miraheze/ManageWiki/security/advisories/GHSA-859x-46h8-vcrv, CVE-2025-43861) - ManageWiki Vulnerable to Self-XSS in review dialog via unsanitized field reflection https://github.com/miraheze/ManageWiki/commit/2f177dc83b28b727613215b835d4036cb179e4ab Citizen + ( https://github.com/StarCitizenTools/mediawiki-skins-Citizen/security/advisories/GHSA-4c2h-67qq-vm87, CVE-2025-49575) - Citizen Allows Stored XSS In Command Palette Tip Messages https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/4fa69e1d062dca7e407cc0530cf1da3e2baaf0b5 Citizen + ( https://github.com/StarCitizenTools/mediawiki-skins-Citizen/security/advisories/GHSA-86xf-2mgp-gv3g, CVE-2025-49576) - Citizen Allows Stored XSS In Search No Result Messages https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/93c36ac778397e0e7c46cf7adb1e5d848265f1bd Citizen + ( https://github.com/StarCitizenTools/mediawiki-skins-Citizen/security/advisories/GHSA-jwr7-992g-68mh, CVE-2025-49577) - Citizen Allows Stored XSS In Preference Menu Headings https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/93c36ac778397e0e7c46cf7adb1e5d848265f1bd Citizen + ( https://github.com/StarCitizenTools/mediawiki-skins-Citizen/security/advisories/GHSA-2v3v-3whp-953h, CVE-2025-49578) - Citizen Allows Stored XSS In User Registration Date Message https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/64cb5d7ab3a6dc0381fae54b31e8fc4afadc8beb Citizen + ( https://github.com/StarCitizenTools/mediawiki-skins-Citizen/security/advisories/GHSA-g3cp-pq72-hjpv, CVE-2025-49579) - Citizen Allows Stored XSS In Menu Heading Message https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/54c8717d45ce1594918f11cb9ce5d0ccd8dfee65 TabberNeue + ( https://github.com/StarCitizenTools/mediawiki-extensions-TabberNeue/security/advisories/GHSA-jfj7-249r-7j2m, CVE-2025-53093) - TabberNeue Vulnerable To Stored XSS Through Wikitext https://github.com/StarCitizenTools/mediawiki-extensions-TabberNeue/commit/4cdf217ef96da74a1503d1dd0bb0ed898fc2a612 ShortDescription + ( https://github.com/StarCitizenTools/mediawiki-extensions-ShortDescription/security/advisories/GHSA-p85q-mww9-gwqf, CVE-2025-53369) - Citizen Short Description Stored XSS Vulnerability Through Wikitext https://github.com/StarCitizenTools/mediawiki-extensions-ShortDescription/commit/bc4fdbaeb1dff127fb6d08c0d385b64aa128c8f8 Citizen + ( https://github.com/StarCitizenTools/mediawiki-skins-Citizen/security/advisories/GHSA-rq6g-6g94-jfr4, CVE-2025-53368) - Citizen Is Vulnerable To Stored XSS Attack In The Legacy Search Bar https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/aedbceb3380bb48db6b59e272fc187529c71c8ca Citizen + ( https://github.com/StarCitizenTools/mediawiki-skins-Citizen/security/advisories/GHSA-prmv-7r8c-794g, CVE-2025-53370) - Citizen Stored XSS Vulnerability Through Short Descriptions https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/c85a40bddc8651fff66df83a72debddcb34f0521 UrlShortener + (T394869 <https://phabricator.wikimedia.org/T394869>, CVE-2025-7056) - Stored XSS in UrlShortener https://gerrit.wikimedia.org/r/c/mediawiki/extensions/UrlShortener/+/1166268 Quiz + (T394612 <https://phabricator.wikimedia.org/T394612>, CVE-2025-7057) - Stored XSS in Quiz https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Quiz/+/1166274 The Wikimedia Security Team recommends updating these extensions and/or skins to the current master branch or relevant, supported release branch [2] as soon as possible. Some of the referenced Phabricator tasks above _may_ still be private. Unfortunately, when security issues are reported, sometimes sensitive information is exposed and since Phabricator is historical, we cannot make these tasks public without exposing this sensitive information. If you have any additional questions or concerns regarding this update, please feel free to contact [email protected] or file a security task within Phabricator [3]. [1] https://phabricator.wikimedia.org/T389312 [2] https://www.mediawiki.org/wiki/Version_lifecycle [3] https://www.mediawiki.org/wiki/Reporting_security_bugs --000000000000ecefc8063981eb3a Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><p style=3D"margin:0px 0px 12px;padding:0px;border:0px;col= or:rgb(0,0,0);font-family:"Segoe UI","Segoe UI Emoji",&= quot;Segoe UI Symbol",Lato,"Helvetica Neue",Helvetica,Arial,= sans-serif;font-size:13px">Greetings-</p><p style=3D"margin:0px 0px 12px;pa= dding:0px;border:0px;color:rgb(0,0,0);font-family:"Segoe UI",&quo= t;Segoe UI Emoji","Segoe UI Symbol",Lato,"Helvetica Neu= e",Helvetica,Arial,sans-serif;font-size:13px">With the security/mainte= nance release of MediaWiki 1.39.13/1.42.7/1.43.2, we would also like to pro= vide this supplementary announcement of MediaWiki extensions and skins with= now-public Phabricator tasks, security patches and backports [1]:</p><p st= yle=3D"margin:0px 0px 12px;padding:0px;border:0px;color:rgb(0,0,0);font-fam= ily:"Segoe UI","Segoe UI Emoji","Segoe UI Symbol&q= uot;,Lato,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:1= 3px">ManageWiki<br style=3D"margin-top:0px">+ (<a href=3D"https://github.co= m/miraheze/ManageWiki/security/advisories/GHSA-gg42-cv66-f5x7" class=3D"gma= il-remarkup-link" target=3D"_blank" rel=3D"noreferrer" style=3D"outline-sty= le:none;text-decoration-line:none;color:rgb(19,108,178)">https://github.com= /miraheze/ManageWiki/security/advisories/GHSA-gg42-cv66-f5x7</a>, CVE-2025-= 32956) - SQL injection vulnerability in NamespaceMigrationJob<br><a href=3D= "https://github.com/miraheze/ManageWiki/commit/f504ed8eeb59b57ebb90f93cd44f= 23da4c5bc4c9" class=3D"gmail-remarkup-link" target=3D"_blank" rel=3D"norefe= rrer" style=3D"outline-style:none;text-decoration-line:none;color:rgb(19,10= 8,178)">https://github.com/miraheze/ManageWiki/commit/f504ed8eeb59b57ebb90f= 93cd44f23da4c5bc4c9</a></p><p style=3D"margin:0px 0px 12px;padding:0px;bord= er:0px;color:rgb(0,0,0);font-family:"Segoe UI","Segoe UI Emo= ji","Segoe UI Symbol",Lato,"Helvetica Neue",Helvet= ica,Arial,sans-serif;font-size:13px">IPInfo<br style=3D"margin-top:0px">+ (= <a href=3D"https://phabricator.wikimedia.org/T392976" class=3D"gmail-phui-t= ag-view gmail-phui-tag-type-object" style=3D"outline-style:none;text-decora= tion-line:none;color:rgb(0,0,0);font-weight:bold"><span class=3D"gmail-phui= -tag-core-closed" style=3D"text-decoration-line:line-through;color:rgba(0,0= ,0,0.5);margin-top:0px"><span class=3D"gmail-phui-tag-core gmail-phui-tag-c= olor-object" style=3D"color:rgb(0,0,0);border:1px solid rgb(199,204,217);bo= rder-radius:3px;padding:0px 4px;background-color:rgb(235,236,238);margin-to= p:0px">T392976</span></span></a>, CVE-2025-53481) - Denial of service vecto= r on ipinfo/v0/norevision<br><a href=3D"https://gerrit.wikimedia.org/r/q/I4= 74b7a1b3bc1e7597fee0826a18a0cf042359f0f" class=3D"gmail-remarkup-link" targ= et=3D"_blank" rel=3D"noreferrer" style=3D"outline-style:none;text-decoratio= n-line:none;color:rgb(19,108,178)">https://gerrit.wikimedia.org/r/q/I474b7a= 1b3bc1e7597fee0826a18a0cf042359f0f</a></p><p style=3D"margin:0px 0px 12px;p= adding:0px;border:0px;color:rgb(0,0,0);font-family:"Segoe UI",&qu= ot;Segoe UI Emoji","Segoe UI Symbol",Lato,"Helvetica Ne= ue",Helvetica,Arial,sans-serif;font-size:13px">IPInfo<br style=3D"marg= in-top:0px">+ (<a href=3D"https://phabricator.wikimedia.org/T392976" class= =3D"gmail-phui-tag-view gmail-phui-tag-type-object" style=3D"outline-style:= none;text-decoration-line:none;color:rgb(0,0,0);font-weight:bold"><span cla= ss=3D"gmail-phui-tag-core-closed" style=3D"text-decoration-line:line-throug= h;color:rgba(0,0,0,0.5);margin-top:0px"><span class=3D"gmail-phui-tag-core = gmail-phui-tag-color-object" style=3D"color:rgb(0,0,0);border:1px solid rgb= (199,204,217);border-radius:3px;padding:0px 4px;background-color:rgb(235,23= 6,238);margin-top:0px">T392976</span></span></a>, CVE-2025-53481) - Denial = of service vector on ipinfo/v0/norevision<br><a href=3D"https://gerrit.wiki= media.org/r/q/I08a7154f8fa08bb6f0940e522075bdc2a3d4433f" class=3D"gmail-rem= arkup-link" target=3D"_blank" rel=3D"noreferrer" style=3D"outline-style:non= e;text-decoration-line:none;color:rgb(19,108,178)">https://gerrit.wikimedia= .org/r/q/I08a7154f8fa08bb6f0940e522075bdc2a3d4433f</a></p><p style=3D"margi= n:0px 0px 12px;padding:0px;border:0px;color:rgb(0,0,0);font-family:"Se= goe UI","Segoe UI Emoji","Segoe UI Symbol",Lato,&q= uot;Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px">IPInfo<= br style=3D"margin-top:0px">+ (<a href=3D"https://phabricator.wikimedia.org= /T394393" class=3D"gmail-phui-tag-view gmail-phui-tag-type-object" style=3D= "outline-style:none;text-decoration-line:none;color:rgb(0,0,0);font-weight:= bold"><span class=3D"gmail-phui-tag-core-closed" style=3D"text-decoration-l= ine:line-through;color:rgba(0,0,0,0.5);margin-top:0px"><span class=3D"gmail= -phui-tag-core gmail-phui-tag-color-object" style=3D"color:rgb(0,0,0);borde= r:1px solid rgb(199,204,217);border-radius:3px;padding:0px 4px;background-c= olor:rgb(235,236,238);margin-top:0px">T394393</span></span></a>, CVE-2025-5= 3482) - IPInfo: Message key XSS through several IPInfo messages in infobox = and popup<br><a href=3D"https://gerrit.wikimedia.org/r/c/mediawiki/extensio= ns/CheckUser/+/1146685" class=3D"gmail-remarkup-link" target=3D"_blank" rel= =3D"noreferrer" style=3D"outline-style:none;text-decoration-line:none;color= :rgb(19,108,178)">https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Che= ckUser/+/1146685</a></p><p style=3D"margin:0px 0px 12px;padding:0px;border:= 0px;color:rgb(0,0,0);font-family:"Segoe UI","Segoe UI Emoji&= quot;,"Segoe UI Symbol",Lato,"Helvetica Neue",Helvetica= ,Arial,sans-serif;font-size:13px">IPInfo<br style=3D"margin-top:0px">+ (<a = href=3D"https://phabricator.wikimedia.org/T394393" class=3D"gmail-phui-tag-= view gmail-phui-tag-type-object" style=3D"outline-style:none;text-decoratio= n-line:none;color:rgb(0,0,0);font-weight:bold"><span class=3D"gmail-phui-ta= g-core-closed" style=3D"text-decoration-line:line-through;color:rgba(0,0,0,= 0.5);margin-top:0px"><span class=3D"gmail-phui-tag-core gmail-phui-tag-colo= r-object" style=3D"color:rgb(0,0,0);border:1px solid rgb(199,204,217);borde= r-radius:3px;padding:0px 4px;background-color:rgb(235,236,238);margin-top:0= px">T394393</span></span></a>, CVE-2025-53482) - IPInfo: Message key XSS th= rough several IPInfo messages in infobox and popup<br><a href=3D"https://ge= rrit.wikimedia.org/r/q/Ibb9b7dcb04f551a3da32e9de09a8ac11caa2a3aa" class=3D"= gmail-remarkup-link" target=3D"_blank" rel=3D"noreferrer" style=3D"outline-= style:none;text-decoration-line:none;color:rgb(19,108,178)">https://gerrit.= wikimedia.org/r/q/Ibb9b7dcb04f551a3da32e9de09a8ac11caa2a3aa</a></p><p style= =3D"margin:0px 0px 12px;padding:0px;border:0px;color:rgb(0,0,0);font-family= :"Segoe UI","Segoe UI Emoji","Segoe UI Symbol"= ;,Lato,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px= ">SecurePoll<br style=3D"margin-top:0px">+ (<a href=3D"https://phabricator.= wikimedia.org/T392341" class=3D"gmail-phui-tag-view gmail-phui-tag-type-obj= ect" style=3D"outline-style:none;text-decoration-line:none;color:rgb(0,0,0)= ;font-weight:bold"><span class=3D"gmail-phui-tag-core-closed" style=3D"text= -decoration-line:line-through;color:rgba(0,0,0,0.5);margin-top:0px"><span c= lass=3D"gmail-phui-tag-core gmail-phui-tag-color-object" style=3D"color:rgb= (0,0,0);border:1px solid rgb(199,204,217);border-radius:3px;padding:0px 4px= ;background-color:rgb(235,236,238);margin-top:0px">T392341</span></span></a= >, CVE-2025-53483) - SecurePoll is vulnerable to XSS, CSRF, and lack of aut= horisation<br><a href=3D"https://gerrit.wikimedia.org/r/c/mediawiki/extensi= ons/SecurePoll/+/1149618" class=3D"gmail-remarkup-link" target=3D"_blank" r= el=3D"noreferrer" style=3D"outline-style:none;text-decoration-line:none;col= or:rgb(19,108,178)">https://gerrit.wikimedia.org/r/c/mediawiki/extensions/S= ecurePoll/+/1149618</a></p><p style=3D"margin:0px 0px 12px;padding:0px;bord= er:0px;color:rgb(0,0,0);font-family:"Segoe UI","Segoe UI Emo= ji","Segoe UI Symbol",Lato,"Helvetica Neue",Helvet= ica,Arial,sans-serif;font-size:13px">SecurePoll<br style=3D"margin-top:0px"= >+ (<a href=3D"https://phabricator.wikimedia.org/T392341" class=3D"gmail-ph= ui-tag-view gmail-phui-tag-type-object" style=3D"outline-style:none;text-de= coration-line:none;color:rgb(0,0,0);font-weight:bold"><span class=3D"gmail-= phui-tag-core-closed" style=3D"text-decoration-line:line-through;color:rgba= (0,0,0,0.5);margin-top:0px"><span class=3D"gmail-phui-tag-core gmail-phui-t= ag-color-object" style=3D"color:rgb(0,0,0);border:1px solid rgb(199,204,217= );border-radius:3px;padding:0px 4px;background-color:rgb(235,236,238);margi= n-top:0px">T392341</span></span></a>, CVE-2025-53484) - SecurePoll is vulne= rable to XSS, CSRF, and lack of authorisation<br><a href=3D"https://gerrit.= wikimedia.org/r/q/I5fb4da635b538b6ef121ae77d9088737fd8bf0de" class=3D"gmail= -remarkup-link" target=3D"_blank" rel=3D"noreferrer" style=3D"outline-style= :none;text-decoration-line:none;color:rgb(19,108,178)">https://gerrit.wikim= edia.org/r/q/I5fb4da635b538b6ef121ae77d9088737fd8bf0de</a></p><p style=3D"m= argin:0px 0px 12px;padding:0px;border:0px;color:rgb(0,0,0);font-family:&quo= t;Segoe UI","Segoe UI Emoji","Segoe UI Symbol",Lat= o,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px">Sec= urePoll<br style=3D"margin-top:0px">+ (<a href=3D"https://phabricator.wikim= edia.org/T392341" class=3D"gmail-phui-tag-view gmail-phui-tag-type-object" = style=3D"outline-style:none;text-decoration-line:none;color:rgb(0,0,0);font= -weight:bold"><span class=3D"gmail-phui-tag-core-closed" style=3D"text-deco= ration-line:line-through;color:rgba(0,0,0,0.5);margin-top:0px"><span class= =3D"gmail-phui-tag-core gmail-phui-tag-color-object" style=3D"color:rgb(0,0= ,0);border:1px solid rgb(199,204,217);border-radius:3px;padding:0px 4px;bac= kground-color:rgb(235,236,238);margin-top:0px">T392341</span></span></a>, C= VE-2025-53483) - SecurePoll is vulnerable to XSS, CSRF, and lack of authori= sation<br><a href=3D"https://gerrit.wikimedia.org/r/q/I7a771f81cc72bd5c6242= 767cf3f5e19fa140accc" class=3D"gmail-remarkup-link" target=3D"_blank" rel= =3D"noreferrer" style=3D"outline-style:none;text-decoration-line:none;color= :rgb(19,108,178)">https://gerrit.wikimedia.org/r/q/I7a771f81cc72bd5c6242767= cf3f5e19fa140accc</a></p><p style=3D"margin:0px 0px 12px;padding:0px;border= :0px;color:rgb(0,0,0);font-family:"Segoe UI","Segoe UI Emoji= ","Segoe UI Symbol",Lato,"Helvetica Neue",Helvetic= a,Arial,sans-serif;font-size:13px">SecurePoll<br style=3D"margin-top:0px">+= (<a href=3D"https://phabricator.wikimedia.org/T392341" class=3D"gmail-phui= -tag-view gmail-phui-tag-type-object" style=3D"outline-style:none;text-deco= ration-line:none;color:rgb(0,0,0);font-weight:bold"><span class=3D"gmail-ph= ui-tag-core-closed" style=3D"text-decoration-line:line-through;color:rgba(0= ,0,0,0.5);margin-top:0px"><span class=3D"gmail-phui-tag-core gmail-phui-tag= -color-object" style=3D"color:rgb(0,0,0);border:1px solid rgb(199,204,217);= border-radius:3px;padding:0px 4px;background-color:rgb(235,236,238);margin-= top:0px">T392341</span></span></a>, CVE-2025-53485) - SecurePoll is vulnera= ble to XSS, CSRF, and lack of authorisation<br><a href=3D"https://gerrit.wi= kimedia.org/r/q/Iaaae70289464b8f097ff8d2d6c828ddf942d2d60" class=3D"gmail-r= emarkup-link" target=3D"_blank" rel=3D"noreferrer" style=3D"outline-style:n= one;text-decoration-line:none;color:rgb(19,108,178)">https://gerrit.wikimed= ia.org/r/q/Iaaae70289464b8f097ff8d2d6c828ddf942d2d60</a></p><p style=3D"mar= gin:0px 0px 12px;padding:0px;border:0px;color:rgb(0,0,0);font-family:"= Segoe UI","Segoe UI Emoji","Segoe UI Symbol",Lato,= "Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px">Secur= ePoll<br style=3D"margin-top:0px">+ (<a href=3D"https://phabricator.wikimed= ia.org/T392341" class=3D"gmail-phui-tag-view gmail-phui-tag-type-object" st= yle=3D"outline-style:none;text-decoration-line:none;color:rgb(0,0,0);font-w= eight:bold"><span class=3D"gmail-phui-tag-core-closed" style=3D"text-decora= tion-line:line-through;color:rgba(0,0,0,0.5);margin-top:0px"><span class=3D= "gmail-phui-tag-core gmail-phui-tag-color-object" style=3D"color:rgb(0,0,0)= ;border:1px solid rgb(199,204,217);border-radius:3px;padding:0px 4px;backgr= ound-color:rgb(235,236,238);margin-top:0px">T392341</span></span></a>, CVE-= 2025-53484) - SecurePoll is vulnerable to XSS, CSRF, and lack of authorisat= ion<br><a href=3D"https://gerrit.wikimedia.org/r/q/Id6e0c8c3020c293460010ef= 0019bc6c40d43b596" class=3D"gmail-remarkup-link" target=3D"_blank" rel=3D"n= oreferrer" style=3D"outline-style:none;text-decoration-line:none;color:rgb(= 19,108,178)">https://gerrit.wikimedia.org/r/q/Id6e0c8c3020c293460010ef0019b= c6c40d43b596</a></p><p style=3D"margin:0px 0px 12px;padding:0px;border:0px;= color:rgb(0,0,0);font-family:"Segoe UI","Segoe UI Emoji"= ;,"Segoe UI Symbol",Lato,"Helvetica Neue",Helvetica,Ari= al,sans-serif;font-size:13px">WikiCategoryTagCloud<br style=3D"margin-top:0= px">+ (<a href=3D"https://phabricator.wikimedia.org/T394590" class=3D"gmail= -phui-tag-view gmail-phui-tag-type-object" style=3D"outline-style:none;text= -decoration-line:none;color:rgb(0,0,0);font-weight:bold"><span class=3D"gma= il-phui-tag-core-closed" style=3D"text-decoration-line:line-through;color:r= gba(0,0,0,0.5);margin-top:0px"><span class=3D"gmail-phui-tag-core gmail-phu= i-tag-color-object" style=3D"color:rgb(0,0,0);border:1px solid rgb(199,204,= 217);border-radius:3px;padding:0px 4px;background-color:rgb(235,236,238);ma= rgin-top:0px">T394590</span></span></a>, CVE-2025-53486) - Reflected XSS in= WikiCategoryTagCloud<br><a href=3D"https://gerrit.wikimedia.org/r/q/Idd68c= f2372aedd916687d30b1bd09ebb48fcfd17" class=3D"gmail-remarkup-link" target= =3D"_blank" rel=3D"noreferrer" style=3D"outline-style:none;text-decoration-= line:none;color:rgb(19,108,178)">https://gerrit.wikimedia.org/r/q/Idd68cf23= 72aedd916687d30b1bd09ebb48fcfd17</a></p><p style=3D"margin:0px 0px 12px;pad= ding:0px;border:0px;color:rgb(0,0,0);font-family:"Segoe UI","= ;Segoe UI Emoji","Segoe UI Symbol",Lato,"Helvetica Neue= ",Helvetica,Arial,sans-serif;font-size:13px">ApprovedRevs<br style=3D"= margin-top:0px">+ (<a href=3D"https://phabricator.wikimedia.org/T394383" cl= ass=3D"gmail-phui-tag-view gmail-phui-tag-type-object" style=3D"outline-sty= le:none;text-decoration-line:none;color:rgb(0,0,0);font-weight:bold"><span = class=3D"gmail-phui-tag-core-closed" style=3D"text-decoration-line:line-thr= ough;color:rgba(0,0,0,0.5);margin-top:0px"><span class=3D"gmail-phui-tag-co= re gmail-phui-tag-color-object" style=3D"color:rgb(0,0,0);border:1px solid = rgb(199,204,217);border-radius:3px;padding:0px 4px;background-color:rgb(235= ,236,238);margin-top:0px">T394383</span></span></a>, CVE-2025-53487) - Stor= ed XSS through system messages in Extension:ApprovedRevs<br><a href=3D"http= s://gerrit.wikimedia.org/r/q/Ifcab085111e7898da485a5e2ae287fee4e6d167b" cla= ss=3D"gmail-remarkup-link" target=3D"_blank" rel=3D"noreferrer" style=3D"ou= tline-style:none;text-decoration-line:none;color:rgb(19,108,178)">https://g= errit.wikimedia.org/r/q/Ifcab085111e7898da485a5e2ae287fee4e6d167b</a></p><p= style=3D"margin:0px 0px 12px;padding:0px;border:0px;color:rgb(0,0,0);font-= family:"Segoe UI","Segoe UI Emoji","Segoe UI Symbo= l",Lato,"Helvetica Neue",Helvetica,Arial,sans-serif;font-siz= e:13px">CheckUser<br style=3D"margin-top:0px">+ (<a href=3D"https://phabric= ator.wikimedia.org/T394692" class=3D"gmail-phui-tag-view gmail-phui-tag-typ= e-object" style=3D"outline-style:none;text-decoration-line:none;color:rgb(0= ,0,0);font-weight:bold"><span class=3D"gmail-phui-tag-core gmail-phui-tag-c= olor-object" style=3D"color:inherit;border:1px solid rgb(199,204,217);borde= r-radius:3px;padding:0px 4px;background-color:rgb(235,236,238);margin-top:0= px">T394692</span></a>, CVE-2025-53478) - Special:Investigate 'IPs and = User agents' tab has i18n XSS vectors<br><a href=3D"https://gerrit.wiki= media.org/r/q/I3a1e21b6800ff4d813a33ee9fe9b7ccf070b6b2e" class=3D"gmail-rem= arkup-link" target=3D"_blank" rel=3D"noreferrer" style=3D"outline-style:non= e;text-decoration-line:none;color:rgb(19,108,178)">https://gerrit.wikimedia= .org/r/q/I3a1e21b6800ff4d813a33ee9fe9b7ccf070b6b2e</a></p><p style=3D"margi= n:0px 0px 12px;padding:0px;border:0px;color:rgb(0,0,0);font-family:"Se= goe UI","Segoe UI Emoji","Segoe UI Symbol",Lato,&q= uot;Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px">CheckUs= er<br style=3D"margin-top:0px">+ (<a href=3D"https://phabricator.wikimedia.= org/T394693" class=3D"gmail-phui-tag-view gmail-phui-tag-type-object" style= =3D"outline-style:none;text-decoration-line:none;color:rgb(0,0,0);font-weig= ht:bold"><span class=3D"gmail-phui-tag-core-closed" style=3D"text-decoratio= n-line:line-through;color:rgba(0,0,0,0.5);margin-top:0px"><span class=3D"gm= ail-phui-tag-core gmail-phui-tag-color-object" style=3D"color:rgb(0,0,0);bo= rder:1px solid rgb(199,204,217);border-radius:3px;padding:0px 4px;backgroun= d-color:rgb(235,236,238);margin-top:0px">T394693</span></span></a>, CVE-202= 5-53479) - Special:CheckUser has i18n XSS vectors<br><a href=3D"https://ger= rit.wikimedia.org/r/q/I159e14543912cb3bc7f4a00c3090c0285b154786" class=3D"g= mail-remarkup-link" target=3D"_blank" rel=3D"noreferrer" style=3D"outline-s= tyle:none;text-decoration-line:none;color:rgb(19,108,178)">https://gerrit.w= ikimedia.org/r/q/I159e14543912cb3bc7f4a00c3090c0285b154786</a></p><p style= =3D"margin:0px 0px 12px;padding:0px;border:0px;color:rgb(0,0,0);font-family= :"Segoe UI","Segoe UI Emoji","Segoe UI Symbol"= ;,Lato,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px= ">CheckUser<br style=3D"margin-top:0px">+ (<a href=3D"https://phabricator.w= ikimedia.org/T394700" class=3D"gmail-phui-tag-view gmail-phui-tag-type-obje= ct" style=3D"outline-style:none;text-decoration-line:none;color:rgb(0,0,0);= font-weight:bold"><span class=3D"gmail-phui-tag-core gmail-phui-tag-color-o= bject" style=3D"color:inherit;border:1px solid rgb(199,204,217);border-radi= us:3px;padding:0px 4px;background-color:rgb(235,236,238);margin-top:0px">T3= 94700</span></a>, CVE-2025-53480) - Special:Investigate 'Account inform= ation' tab has i18n XSS vectors<br><a href=3D"https://gerrit.wikimedia.= org/r/q/I777fc55fef15c3b00df0db268af2b64cb2d6e381" class=3D"gmail-remarkup-= link" target=3D"_blank" rel=3D"noreferrer" style=3D"outline-style:none;text= -decoration-line:none;color:rgb(19,108,178)">https://gerrit.wikimedia.org/r= /q/I777fc55fef15c3b00df0db268af2b64cb2d6e381</a></p><p style=3D"margin:0px = 0px 12px;padding:0px;border:0px;color:rgb(0,0,0);font-family:"Segoe UI= ","Segoe UI Emoji","Segoe UI Symbol",Lato,"He= lvetica Neue",Helvetica,Arial,sans-serif;font-size:13px">MsUpload<br s= tyle=3D"margin-top:0px">+ (<a href=3D"https://phabricator.wikimedia.org/T39= 4864" class=3D"gmail-phui-tag-view gmail-phui-tag-type-object" style=3D"out= line-style:none;text-decoration-line:none;color:rgb(0,0,0);font-weight:bold= "><span class=3D"gmail-phui-tag-core-closed" style=3D"text-decoration-line:= line-through;color:rgba(0,0,0,0.5);margin-top:0px"><span class=3D"gmail-phu= i-tag-core gmail-phui-tag-color-object" style=3D"color:rgb(0,0,0);border:1p= x solid rgb(199,204,217);border-radius:3px;padding:0px 4px;background-color= :rgb(235,236,238);margin-top:0px">T394864</span></span></a>, CVE-2025-7362)= - Stored XSS through a system message in MsUpload<br><a href=3D"https://ge= rrit.wikimedia.org/r/q/Icf4c0a5a936926ea887ca2e48c3a7bd297201d9f" class=3D"= gmail-remarkup-link" target=3D"_blank" rel=3D"noreferrer" style=3D"outline-= style:none;text-decoration-line:none;color:rgb(19,108,178)">https://gerrit.= wikimedia.org/r/q/Icf4c0a5a936926ea887ca2e48c3a7bd297201d9f</a></p><p style= =3D"margin:0px 0px 12px;padding:0px;border:0px;color:rgb(0,0,0);font-family= :"Segoe UI","Segoe UI Emoji","Segoe UI Symbol"= ;,Lato,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px= ">TitleIcon<br style=3D"margin-top:0px">+ (<a href=3D"https://phabricator.w= ikimedia.org/T394721" class=3D"gmail-phui-tag-view gmail-phui-tag-type-obje= ct" style=3D"outline-style:none;text-decoration-line:none;color:rgb(0,0,0);= font-weight:bold"><span class=3D"gmail-phui-tag-core-closed" style=3D"text-= decoration-line:line-through;color:rgba(0,0,0,0.5);margin-top:0px"><span cl= ass=3D"gmail-phui-tag-core gmail-phui-tag-color-object" style=3D"color:rgb(= 0,0,0);border:1px solid rgb(199,204,217);border-radius:3px;padding:0px 4px;= background-color:rgb(235,236,238);margin-top:0px">T394721</span></span></a>= , CVE-2025-7363) - XSS in TitleIcon<br><a href=3D"https://gerrit.wikimedia.= org/r/q/I107ab638fecbf52b5bec3f02726ed24b1ae74429" class=3D"gmail-remarkup-= link" target=3D"_blank" rel=3D"noreferrer" style=3D"outline-style:none;text= -decoration-line:none;color:rgb(19,108,178)">https://gerrit.wikimedia.org/r= /q/I107ab638fecbf52b5bec3f02726ed24b1ae74429</a></p><p style=3D"margin:0px = 0px 12px;padding:0px;border:0px;color:rgb(0,0,0);font-family:"Segoe UI= ","Segoe UI Emoji","Segoe UI Symbol",Lato,"He= lvetica Neue",Helvetica,Arial,sans-serif;font-size:13px">TwoColConflic= t<br style=3D"margin-top:0px">+ (<a href=3D"https://phabricator.wikimedia.o= rg/T394938" class=3D"gmail-phui-tag-view gmail-phui-tag-type-object" style= =3D"outline-style:none;text-decoration-line:none;color:rgb(0,0,0);font-weig= ht:bold"><span class=3D"gmail-phui-tag-core-closed" style=3D"text-decoratio= n-line:line-through;color:rgba(0,0,0,0.5);margin-top:0px"><span class=3D"gm= ail-phui-tag-core gmail-phui-tag-color-object" style=3D"color:rgb(0,0,0);bo= rder:1px solid rgb(199,204,217);border-radius:3px;padding:0px 4px;backgroun= d-color:rgb(235,236,238);margin-top:0px">T394938</span></span></a>, CVE-202= 5-53494) - Stored XSS in TwoColConflict<br><a href=3D"https://gerrit.wikime= dia.org/r/c/mediawiki/extensions/TwoColConflict/+/1150011" class=3D"gmail-r= emarkup-link" target=3D"_blank" rel=3D"noreferrer" style=3D"outline-style:n= one;text-decoration-line:none;color:rgb(19,108,178)">https://gerrit.wikimed= ia.org/r/c/mediawiki/extensions/TwoColConflict/+/1150011</a></p><p style=3D= "margin:0px 0px 12px;padding:0px;border:0px;color:rgb(0,0,0);font-family:&q= uot;Segoe UI","Segoe UI Emoji","Segoe UI Symbol",L= ato,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px">M= intyDocs<br style=3D"margin-top:0px">+ (<a href=3D"https://phabricator.wiki= media.org/T395376" class=3D"gmail-phui-tag-view gmail-phui-tag-type-object"= style=3D"outline-style:none;text-decoration-line:none;color:rgb(0,0,0);fon= t-weight:bold"><span class=3D"gmail-phui-tag-core-closed" style=3D"text-dec= oration-line:line-through;color:rgba(0,0,0,0.5);margin-top:0px"><span class= =3D"gmail-phui-tag-core gmail-phui-tag-color-object" style=3D"color:rgb(0,0= ,0);border:1px solid rgb(199,204,217);border-radius:3px;padding:0px 4px;bac= kground-color:rgb(235,236,238);margin-top:0px">T395376</span></span></a>, C= VE-2025-53493) - Stored XSS in MintyDocs<br><a href=3D"https://gerrit.wikim= edia.org/r/c/mediawiki/extensions/MintyDocs/+/1151800" class=3D"gmail-remar= kup-link" target=3D"_blank" rel=3D"noreferrer" style=3D"outline-style:none;= text-decoration-line:none;color:rgb(19,108,178)">https://gerrit.wikimedia.o= rg/r/c/mediawiki/extensions/MintyDocs/+/1151800</a></p><p style=3D"margin:0= px 0px 12px;padding:0px;border:0px;color:rgb(0,0,0);font-family:"Segoe= UI","Segoe UI Emoji","Segoe UI Symbol",Lato,"= ;Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px">MintyDocs<= br style=3D"margin-top:0px">+ (<a href=3D"https://phabricator.wikimedia.org= /T395737" class=3D"gmail-phui-tag-view gmail-phui-tag-type-object" style=3D= "outline-style:none;text-decoration-line:none;color:rgb(0,0,0);font-weight:= bold"><span class=3D"gmail-phui-tag-core-closed" style=3D"text-decoration-l= ine:line-through;color:rgba(0,0,0,0.5);margin-top:0px"><span class=3D"gmail= -phui-tag-core gmail-phui-tag-color-object" style=3D"color:rgb(0,0,0);borde= r:1px solid rgb(199,204,217);border-radius:3px;padding:0px 4px;background-c= olor:rgb(235,236,238);margin-top:0px">T395737</span></span></a>, CVE-2025-5= 3492) - Stored XSS in MintyDocs<br><a href=3D"https://gerrit.wikimedia.org/= r/c/mediawiki/extensions/MintyDocs/+/1152771" class=3D"gmail-remarkup-link"= target=3D"_blank" rel=3D"noreferrer" style=3D"outline-style:none;text-deco= ration-line:none;color:rgb(19,108,178)">https://gerrit.wikimedia.org/r/c/me= diawiki/extensions/MintyDocs/+/1152771</a></p><p style=3D"margin:0px 0px 12= px;padding:0px;border:0px;color:rgb(0,0,0);font-family:"Segoe UI"= ,"Segoe UI Emoji","Segoe UI Symbol",Lato,"Helvetic= a Neue",Helvetica,Arial,sans-serif;font-size:13px">FlaggedRevs<br styl= e=3D"margin-top:0px">+ (<a href=3D"https://phabricator.wikimedia.org/T39439= 7" class=3D"gmail-phui-tag-view gmail-phui-tag-type-object" style=3D"outlin= e-style:none;text-decoration-line:none;color:rgb(0,0,0);font-weight:bold"><= span class=3D"gmail-phui-tag-core-closed" style=3D"text-decoration-line:lin= e-through;color:rgba(0,0,0,0.5);margin-top:0px"><span class=3D"gmail-phui-t= ag-core gmail-phui-tag-color-object" style=3D"color:rgb(0,0,0);border:1px s= olid rgb(199,204,217);border-radius:3px;padding:0px 4px;background-color:rg= b(235,236,238);margin-top:0px">T394397</span></span></a>, CVE-2025-53491) -= Stored XSS in FlaggedRevs<br><a href=3D"https://gerrit.wikimedia.org/r/c/m= ediawiki/extensions/FlaggedRevs/+/1165929" class=3D"gmail-remarkup-link" ta= rget=3D"_blank" rel=3D"noreferrer" style=3D"outline-style:none;text-decorat= ion-line:none;color:rgb(19,108,178)">https://gerrit.wikimedia.org/r/c/media= wiki/extensions/FlaggedRevs/+/1165929</a></p><p style=3D"margin:0px 0px 12p= x;padding:0px;border:0px;color:rgb(0,0,0);font-family:"Segoe UI",= "Segoe UI Emoji","Segoe UI Symbol",Lato,"Helvetica= Neue",Helvetica,Arial,sans-serif;font-size:13px">CampaignEvents<br st= yle=3D"margin-top:0px">+ (<a href=3D"https://phabricator.wikimedia.org/T395= 622" class=3D"gmail-phui-tag-view gmail-phui-tag-type-object" style=3D"outl= ine-style:none;text-decoration-line:none;color:rgb(0,0,0);font-weight:bold"= ><span class=3D"gmail-phui-tag-core-closed" style=3D"text-decoration-line:l= ine-through;color:rgba(0,0,0,0.5);margin-top:0px"><span class=3D"gmail-phui= -tag-core gmail-phui-tag-color-object" style=3D"color:rgb(0,0,0);border:1px= solid rgb(199,204,217);border-radius:3px;padding:0px 4px;background-color:= rgb(235,236,238);margin-top:0px">T395622</span></span></a>, CVE-2025-53490)= - Multiple XSS in CampaignEvents<br><a href=3D"https://gerrit.wikimedia.or= g/r/c/mediawiki/extensions/CampaignEvents/+/1165949" class=3D"gmail-remarku= p-link" target=3D"_blank" rel=3D"noreferrer" style=3D"outline-style:none;te= xt-decoration-line:none;color:rgb(19,108,178)">https://gerrit.wikimedia.org= /r/c/mediawiki/extensions/CampaignEvents/+/1165949</a></p><p style=3D"margi= n:0px 0px 12px;padding:0px;border:0px;color:rgb(0,0,0);font-family:"Se= goe UI","Segoe UI Emoji","Segoe UI Symbol",Lato,&q= uot;Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px">GoogleD= ocs4MW<br style=3D"margin-top:0px">+ (<a href=3D"https://phabricator.wikime= dia.org/T395949" class=3D"gmail-phui-tag-view gmail-phui-tag-type-object" s= tyle=3D"outline-style:none;text-decoration-line:none;color:rgb(0,0,0);font-= weight:bold"><span class=3D"gmail-phui-tag-core-closed" style=3D"text-decor= ation-line:line-through;color:rgba(0,0,0,0.5);margin-top:0px"><span class= =3D"gmail-phui-tag-core gmail-phui-tag-color-object" style=3D"color:rgb(0,0= ,0);border:1px solid rgb(199,204,217);border-radius:3px;padding:0px 4px;bac= kground-color:rgb(235,236,238);margin-top:0px">T395949</span></span></a>, C= VE-2025-53489) - XSS in GoogleDocs4MW<br><a href=3D"https://gerrit.wikimedi= a.org/r/c/mediawiki/extensions/GoogleDocs4MW/+/1155269" class=3D"gmail-rema= rkup-link" target=3D"_blank" rel=3D"noreferrer" style=3D"outline-style:none= ;text-decoration-line:none;color:rgb(19,108,178)">https://gerrit.wikimedia.= org/r/c/mediawiki/extensions/GoogleDocs4MW/+/1155269</a></p><p style=3D"mar= gin:0px 0px 12px;padding:0px;border:0px;color:rgb(0,0,0);font-family:"= Segoe UI","Segoe UI Emoji","Segoe UI Symbol",Lato,= "Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px">wikih= iero<br style=3D"margin-top:0px">+ (<a href=3D"https://phabricator.wikimedi= a.org/T396524" class=3D"gmail-phui-tag-view gmail-phui-tag-type-object" sty= le=3D"outline-style:none;text-decoration-line:none;color:rgb(0,0,0);font-we= ight:bold"><span class=3D"gmail-phui-tag-core-closed" style=3D"text-decorat= ion-line:line-through;color:rgba(0,0,0,0.5);margin-top:0px"><span class=3D"= gmail-phui-tag-core gmail-phui-tag-color-object" style=3D"color:rgb(0,0,0);= border:1px solid rgb(199,204,217);border-radius:3px;padding:0px 4px;backgro= und-color:rgb(235,236,238);margin-top:0px">T396524</span></span></a>, CVE-2= 025-53488) - Stored XSS in WikiHiero<br><a href=3D"https://gerrit.wikimedia= .org/r/c/mediawiki/extensions/wikihiero/+/1166018" class=3D"gmail-remarkup-= link" target=3D"_blank" rel=3D"noreferrer" style=3D"outline-style:none;text= -decoration-line:none;color:rgb(19,108,178)">https://gerrit.wikimedia.org/r= /c/mediawiki/extensions/wikihiero/+/1166018</a></p><p style=3D"margin:0px 0= px 12px;padding:0px;border:0px;color:rgb(0,0,0);font-family:"Segoe UI&= quot;,"Segoe UI Emoji","Segoe UI Symbol",Lato,"Hel= vetica Neue",Helvetica,Arial,sans-serif;font-size:13px">RelatedArticle= s<br style=3D"margin-top:0px">+ (<a href=3D"https://phabricator.wikimedia.o= rg/T396413" class=3D"gmail-phui-tag-view gmail-phui-tag-type-object" style= =3D"outline-style:none;text-decoration-line:none;color:rgb(0,0,0);font-weig= ht:bold"><span class=3D"gmail-phui-tag-core-closed" style=3D"text-decoratio= n-line:line-through;color:rgba(0,0,0,0.5);margin-top:0px"><span class=3D"gm= ail-phui-tag-core gmail-phui-tag-color-object" style=3D"color:rgb(0,0,0);bo= rder:1px solid rgb(199,204,217);border-radius:3px;padding:0px 4px;backgroun= d-color:rgb(235,236,238);margin-top:0px">T396413</span></span></a>, CVE-202= 5-53497) - Stored XSS in RelatedArticles<br><a href=3D"https://gerrit.wikim= edia.org/r/c/mediawiki/extensions/RelatedArticles/+/1166024" class=3D"gmail= -remarkup-link" target=3D"_blank" rel=3D"noreferrer" style=3D"outline-style= :none;text-decoration-line:none;color:rgb(19,108,178)">https://gerrit.wikim= edia.org/r/c/mediawiki/extensions/RelatedArticles/+/1166024</a></p><p style= =3D"margin:0px 0px 12px;padding:0px;border:0px;color:rgb(0,0,0);font-family= :"Segoe UI","Segoe UI Emoji","Segoe UI Symbol"= ;,Lato,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px= ">MediaSearch<br style=3D"margin-top:0px">+ (<a href=3D"https://phabricator= .wikimedia.org/T396946" class=3D"gmail-phui-tag-view gmail-phui-tag-type-ob= ject" style=3D"outline-style:none;text-decoration-line:none;color:rgb(0,0,0= );font-weight:bold"><span class=3D"gmail-phui-tag-core-closed" style=3D"tex= t-decoration-line:line-through;color:rgba(0,0,0,0.5);margin-top:0px"><span = class=3D"gmail-phui-tag-core gmail-phui-tag-color-object" style=3D"color:rg= b(0,0,0);border:1px solid rgb(199,204,217);border-radius:3px;padding:0px 4p= x;background-color:rgb(235,236,238);margin-top:0px">T396946</span></span></= a>, CVE-2025-53496) - Stored XSS in MediaSearch<br><a href=3D"https://gerri= t.wikimedia.org/r/c/mediawiki/extensions/MediaSearch/+/1166030" class=3D"gm= ail-remarkup-link" target=3D"_blank" rel=3D"noreferrer" style=3D"outline-st= yle:none;text-decoration-line:none;color:rgb(19,108,178)">https://gerrit.wi= kimedia.org/r/c/mediawiki/extensions/MediaSearch/+/1166030</a></p><p style= =3D"margin:0px 0px 12px;padding:0px;border:0px;color:rgb(0,0,0);font-family= :"Segoe UI","Segoe UI Emoji","Segoe UI Symbol"= ;,Lato,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px= ">AbuseFilter<br style=3D"margin-top:0px">+ (<a href=3D"https://phabricator= .wikimedia.org/T396750" class=3D"gmail-phui-tag-view gmail-phui-tag-type-ob= ject" style=3D"outline-style:none;text-decoration-line:none;color:rgb(0,0,0= );font-weight:bold"><span class=3D"gmail-phui-tag-core-closed" style=3D"tex= t-decoration-line:line-through;color:rgba(0,0,0,0.5);margin-top:0px"><span = class=3D"gmail-phui-tag-core gmail-phui-tag-color-object" style=3D"color:rg= b(0,0,0);border:1px solid rgb(199,204,217);border-radius:3px;padding:0px 4p= x;background-color:rgb(235,236,238);margin-top:0px">T396750</span></span></= a>, CVE-2025-53495) - Unauthorized Disclosure of IP Reputation in AbuseFilt= er<br><a href=3D"https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Abus= eFilter/+/1166040" class=3D"gmail-remarkup-link" target=3D"_blank" rel=3D"n= oreferrer" style=3D"outline-style:none;text-decoration-line:none;color:rgb(= 19,108,178)">https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFil= ter/+/1166040</a></p><p style=3D"margin:0px 0px 12px;padding:0px;border:0px= ;color:rgb(0,0,0);font-family:"Segoe UI","Segoe UI Emoji&quo= t;,"Segoe UI Symbol",Lato,"Helvetica Neue",Helvetica,Ar= ial,sans-serif;font-size:13px">AbuseFilter<br style=3D"margin-top:0px">+ (<= a href=3D"https://phabricator.wikimedia.org/T397196" class=3D"gmail-phui-ta= g-view gmail-phui-tag-type-object" style=3D"outline-style:none;text-decorat= ion-line:none;color:rgb(0,0,0);font-weight:bold"><span class=3D"gmail-phui-= tag-core-closed" style=3D"text-decoration-line:line-through;color:rgba(0,0,= 0,0.5);margin-top:0px"><span class=3D"gmail-phui-tag-core gmail-phui-tag-co= lor-object" style=3D"color:rgb(0,0,0);border:1px solid rgb(199,204,217);bor= der-radius:3px;padding:0px 4px;background-color:rgb(235,236,238);margin-top= :0px">T397196</span></span></a>, CVE-2025-53499) - Unauthorized Inspection = of Protected Variables in AbuseFilter<br><a href=3D"https://gerrit.wikimedi= a.org/r/c/mediawiki/extensions/AbuseFilter/+/1166045" class=3D"gmail-remark= up-link" target=3D"_blank" rel=3D"noreferrer" style=3D"outline-style:none;t= ext-decoration-line:none;color:rgb(19,108,178)">https://gerrit.wikimedia.or= g/r/c/mediawiki/extensions/AbuseFilter/+/1166045</a></p><p style=3D"margin:= 0px 0px 12px;padding:0px;border:0px;color:rgb(0,0,0);font-family:"Sego= e UI","Segoe UI Emoji","Segoe UI Symbol",Lato,&quo= t;Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px">AbuseFilt= er<br style=3D"margin-top:0px">+ (<a href=3D"https://phabricator.wikimedia.= org/T397221" class=3D"gmail-phui-tag-view gmail-phui-tag-type-object" style= =3D"outline-style:none;text-decoration-line:none;color:rgb(0,0,0);font-weig= ht:bold"><span class=3D"gmail-phui-tag-core-closed" style=3D"text-decoratio= n-line:line-through;color:rgba(0,0,0,0.5);margin-top:0px"><span class=3D"gm= ail-phui-tag-core gmail-phui-tag-color-object" style=3D"color:rgb(0,0,0);bo= rder:1px solid rgb(199,204,217);border-radius:3px;padding:0px 4px;backgroun= d-color:rgb(235,236,238);margin-top:0px">T397221</span></span></a>, CVE-202= 5-53498) - Lack of Audit Logging in AbuseFilter<br><a href=3D"https://gerri= t.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/1166844" class=3D"gm= ail-remarkup-link" target=3D"_blank" rel=3D"noreferrer" style=3D"outline-st= yle:none;text-decoration-line:none;color:rgb(19,108,178)">https://gerrit.wi= kimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/1166844</a></p><p style= =3D"margin:0px 0px 12px;padding:0px;border:0px;color:rgb(0,0,0);font-family= :"Segoe UI","Segoe UI Emoji","Segoe UI Symbol"= ;,Lato,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px= ">FeaturedFeeds<br style=3D"margin-top:0px">+ (<a href=3D"https://phabricat= or.wikimedia.org/T392279" class=3D"gmail-phui-tag-view gmail-phui-tag-type-= object" style=3D"outline-style:none;text-decoration-line:none;color:rgb(0,0= ,0);font-weight:bold"><span class=3D"gmail-phui-tag-core-closed" style=3D"t= ext-decoration-line:line-through;color:rgba(0,0,0,0.5);margin-top:0px"><spa= n class=3D"gmail-phui-tag-core gmail-phui-tag-color-object" style=3D"color:= rgb(0,0,0);border:1px solid rgb(199,204,217);border-radius:3px;padding:0px = 4px;background-color:rgb(235,236,238);margin-top:0px">T392279</span></span>= </a>, CVE-2025-53502) - HTML injection in FeaturedFeeds<br><a href=3D"https= ://gerrit.wikimedia.org/r/c/mediawiki/extensions/FeaturedFeeds/+/1149742" c= lass=3D"gmail-remarkup-link" target=3D"_blank" rel=3D"noreferrer" style=3D"= outline-style:none;text-decoration-line:none;color:rgb(19,108,178)">https:/= /gerrit.wikimedia.org/r/c/mediawiki/extensions/FeaturedFeeds/+/1149742</a><= /p><p style=3D"margin:0px 0px 12px;padding:0px;border:0px;color:rgb(0,0,0);= font-family:"Segoe UI","Segoe UI Emoji","Segoe UI = Symbol",Lato,"Helvetica Neue",Helvetica,Arial,sans-serif;fon= t-size:13px">Scribunto<br style=3D"margin-top:0px">+ (<a href=3D"https://ph= abricator.wikimedia.org/T397524" class=3D"gmail-phui-tag-view gmail-phui-ta= g-type-object" style=3D"outline-style:none;text-decoration-line:none;color:= rgb(0,0,0);font-weight:bold"><span class=3D"gmail-phui-tag-core-closed" sty= le=3D"text-decoration-line:line-through;color:rgba(0,0,0,0.5);margin-top:0p= x"><span class=3D"gmail-phui-tag-core gmail-phui-tag-color-object" style=3D= "color:rgb(0,0,0);border:1px solid rgb(199,204,217);border-radius:3px;paddi= ng:0px 4px;background-color:rgb(235,236,238);margin-top:0px">T397524</span>= </span></a>, CVE-2025-53501) - Content Access Bypass in Scribunto<br><a hre= f=3D"https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Scribunto/+/1164= 541" class=3D"gmail-remarkup-link" target=3D"_blank" rel=3D"noreferrer" sty= le=3D"outline-style:none;text-decoration-line:none;color:rgb(19,108,178)">h= ttps://gerrit.wikimedia.org/r/c/mediawiki/extensions/Scribunto/+/1164541</a= ></p><p style=3D"margin:0px 0px 12px;padding:0px;border:0px;color:rgb(0,0,0= );font-family:"Segoe UI","Segoe UI Emoji","Segoe U= I Symbol",Lato,"Helvetica Neue",Helvetica,Arial,sans-serif;f= ont-size:13px">MassEditRegex<br style=3D"margin-top:0px">+ (<a href=3D"http= s://phabricator.wikimedia.org/T397334" class=3D"gmail-phui-tag-view gmail-p= hui-tag-type-object" style=3D"outline-style:none;text-decoration-line:none;= color:rgb(0,0,0);font-weight:bold"><span class=3D"gmail-phui-tag-core-close= d" style=3D"text-decoration-line:line-through;color:rgba(0,0,0,0.5);margin-= top:0px"><span class=3D"gmail-phui-tag-core gmail-phui-tag-color-object" st= yle=3D"color:rgb(0,0,0);border:1px solid rgb(199,204,217);border-radius:3px= ;padding:0px 4px;background-color:rgb(235,236,238);margin-top:0px">T397334<= /span></span></a>, CVE-2025-53500) - Stored XSS in MassEditRegex<br><a href= =3D"https://gerrit.wikimedia.org/r/c/mediawiki/extensions/MassEditRegex/+/1= 163878" class=3D"gmail-remarkup-link" target=3D"_blank" rel=3D"noreferrer" = style=3D"outline-style:none;text-decoration-line:none;color:rgb(19,108,178)= ">https://gerrit.wikimedia.org/r/c/mediawiki/extensions/MassEditRegex/+/116= 3878</a></p><p style=3D"margin:0px 0px 12px;padding:0px;border:0px;color:rg= b(0,0,0);font-family:"Segoe UI","Segoe UI Emoji","= Segoe UI Symbol",Lato,"Helvetica Neue",Helvetica,Arial,sans-= serif;font-size:13px">CentralAuth<br style=3D"margin-top:0px">+ (<a href=3D= "https://phabricator.wikimedia.org/T389010" class=3D"gmail-phui-tag-view gm= ail-phui-tag-type-object" style=3D"outline-style:none;text-decoration-line:= none;color:rgb(0,0,0);font-weight:bold"><span class=3D"gmail-phui-tag-core-= closed" style=3D"text-decoration-line:line-through;color:rgba(0,0,0,0.5);ma= rgin-top:0px"><span class=3D"gmail-phui-tag-core gmail-phui-tag-color-objec= t" style=3D"color:rgb(0,0,0);border:1px solid rgb(199,204,217);border-radiu= s:3px;padding:0px 4px;background-color:rgb(235,236,238);margin-top:0px">T38= 9010</span></span></a>, CVE-2025-6926) - Security Authentication Bypass in = CentralAuth<br><a href=3D"https://gerrit.wikimedia.org/r/c/mediawiki/core/+= /1165117" class=3D"gmail-remarkup-link" target=3D"_blank" rel=3D"noreferrer= " style=3D"outline-style:none;text-decoration-line:none;color:rgb(19,108,17= 8)">https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1165117</a></p><p sty= le=3D"margin:0px 0px 12px;padding:0px;border:0px;color:rgb(0,0,0);font-fami= ly:"Segoe UI","Segoe UI Emoji","Segoe UI Symbol&qu= ot;,Lato,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13= px">ManageWiki<br style=3D"margin-top:0px">+ (<a href=3D"https://github.com= /miraheze/ManageWiki/security/advisories/GHSA-ccrf-x5rp-gppr" class=3D"gmai= l-remarkup-link" target=3D"_blank" rel=3D"noreferrer" style=3D"outline-styl= e:none;text-decoration-line:none;color:rgb(19,108,178)">https://github.com/= miraheze/ManageWiki/security/advisories/GHSA-ccrf-x5rp-gppr</a>, CVE-2025-3= 2964) - ManageWiki Vulnerable To Permission Bypass When Disabling Extension= s Requiring Certain Permissions In Special:ManageWiki/Extensions<br><a href= =3D"https://github.com/miraheze/ManageWiki/commit/00bebea43a3e3ff0157b5f04d= f17c1d1e88a9acd" class=3D"gmail-remarkup-link" target=3D"_blank" rel=3D"nor= eferrer" style=3D"outline-style:none;text-decoration-line:none;color:rgb(19= ,108,178)">https://github.com/miraheze/ManageWiki/commit/00bebea43a3e3ff015= 7b5f04df17c1d1e88a9acd</a></p><p style=3D"margin:0px 0px 12px;padding:0px;b= order:0px;color:rgb(0,0,0);font-family:"Segoe UI","Segoe UI = Emoji","Segoe UI Symbol",Lato,"Helvetica Neue",Hel= vetica,Arial,sans-serif;font-size:13px">ManageWiki<br style=3D"margin-top:0= px">+ (<a href=3D"https://github.com/miraheze/ManageWiki/security/advisorie= s/GHSA-859x-46h8-vcrv" class=3D"gmail-remarkup-link" target=3D"_blank" rel= =3D"noreferrer" style=3D"outline-style:none;text-decoration-line:none;color= :rgb(19,108,178)">https://github.com/miraheze/ManageWiki/security/advisorie= s/GHSA-859x-46h8-vcrv</a>, CVE-2025-43861) - ManageWiki Vulnerable to Self-= XSS in review dialog via unsanitized field reflection<br><a href=3D"https:/= /github.com/miraheze/ManageWiki/commit/2f177dc83b28b727613215b835d4036cb179= e4ab" class=3D"gmail-remarkup-link" target=3D"_blank" rel=3D"noreferrer" st= yle=3D"outline-style:none;text-decoration-line:none;color:rgb(19,108,178)">= https://github.com/miraheze/ManageWiki/commit/2f177dc83b28b727613215b835d40= 36cb179e4ab</a></p><p style=3D"margin:0px 0px 12px;padding:0px;border:0px;c= olor:rgb(0,0,0);font-family:"Segoe UI","Segoe UI Emoji"= ,"Segoe UI Symbol",Lato,"Helvetica Neue",Helvetica,Aria= l,sans-serif;font-size:13px">Citizen<br style=3D"margin-top:0px">+ (<a href= =3D"https://github.com/StarCitizenTools/mediawiki-skins-Citizen/security/ad= visories/GHSA-4c2h-67qq-vm87" class=3D"gmail-remarkup-link" target=3D"_blan= k" rel=3D"noreferrer" style=3D"outline-style:none;text-decoration-line:none= ;color:rgb(19,108,178)">https://github.com/StarCitizenTools/mediawiki-skins= -Citizen/security/advisories/GHSA-4c2h-67qq-vm87</a>, CVE-2025-49575) - Cit= izen Allows Stored XSS In Command Palette Tip Messages<br><a href=3D"https:= //github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/4fa69e1d062dca= 7e407cc0530cf1da3e2baaf0b5" class=3D"gmail-remarkup-link" target=3D"_blank"= rel=3D"noreferrer" style=3D"outline-style:none;text-decoration-line:none;c= olor:rgb(19,108,178)">https://github.com/StarCitizenTools/mediawiki-skins-C= itizen/commit/4fa69e1d062dca7e407cc0530cf1da3e2baaf0b5</a></p><p style=3D"m= argin:0px 0px 12px;padding:0px;border:0px;color:rgb(0,0,0);font-family:&quo= t;Segoe UI","Segoe UI Emoji","Segoe UI Symbol",Lat= o,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px">Cit= izen<br style=3D"margin-top:0px">+ (<a href=3D"https://github.com/StarCitiz= enTools/mediawiki-skins-Citizen/security/advisories/GHSA-86xf-2mgp-gv3g" cl= ass=3D"gmail-remarkup-link" target=3D"_blank" rel=3D"noreferrer" style=3D"o= utline-style:none;text-decoration-line:none;color:rgb(19,108,178)">https://= github.com/StarCitizenTools/mediawiki-skins-Citizen/security/advisories/GHS= A-86xf-2mgp-gv3g</a>, CVE-2025-49576) - Citizen Allows Stored XSS In Search= No Result Messages<br><a href=3D"https://github.com/StarCitizenTools/media= wiki-skins-Citizen/commit/93c36ac778397e0e7c46cf7adb1e5d848265f1bd" class= =3D"gmail-remarkup-link" target=3D"_blank" rel=3D"noreferrer" style=3D"outl= ine-style:none;text-decoration-line:none;color:rgb(19,108,178)">https://git= hub.com/StarCitizenTools/mediawiki-skins-Citizen/commit/93c36ac778397e0e7c4= 6cf7adb1e5d848265f1bd</a></p><p style=3D"margin:0px 0px 12px;padding:0px;bo= rder:0px;color:rgb(0,0,0);font-family:"Segoe UI","Segoe UI E= moji","Segoe UI Symbol",Lato,"Helvetica Neue",Helv= etica,Arial,sans-serif;font-size:13px">Citizen<br style=3D"margin-top:0px">= + (<a href=3D"https://github.com/StarCitizenTools/mediawiki-skins-Citizen/s= ecurity/advisories/GHSA-jwr7-992g-68mh" class=3D"gmail-remarkup-link" targe= t=3D"_blank" rel=3D"noreferrer" style=3D"outline-style:none;text-decoration= -line:none;color:rgb(19,108,178)">https://github.com/StarCitizenTools/media= wiki-skins-Citizen/security/advisories/GHSA-jwr7-992g-68mh</a>, CVE-2025-49= 577) - Citizen Allows Stored XSS In Preference Menu Headings<br><a href=3D"= https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/93c36ac7= 78397e0e7c46cf7adb1e5d848265f1bd" class=3D"gmail-remarkup-link" target=3D"_= blank" rel=3D"noreferrer" style=3D"outline-style:none;text-decoration-line:= none;color:rgb(19,108,178)">https://github.com/StarCitizenTools/mediawiki-s= kins-Citizen/commit/93c36ac778397e0e7c46cf7adb1e5d848265f1bd</a></p><p styl= e=3D"margin:0px 0px 12px;padding:0px;border:0px;color:rgb(0,0,0);font-famil= y:"Segoe UI","Segoe UI Emoji","Segoe UI Symbol&quo= t;,Lato,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13p= x">Citizen<br style=3D"margin-top:0px">+ (<a href=3D"https://github.com/Sta= rCitizenTools/mediawiki-skins-Citizen/security/advisories/GHSA-2v3v-3whp-95= 3h" class=3D"gmail-remarkup-link" target=3D"_blank" rel=3D"noreferrer" styl= e=3D"outline-style:none;text-decoration-line:none;color:rgb(19,108,178)">ht= tps://github.com/StarCitizenTools/mediawiki-skins-Citizen/security/advisori= es/GHSA-2v3v-3whp-953h</a>, CVE-2025-49578) - Citizen Allows Stored XSS In = User Registration Date Message<br><a href=3D"https://github.com/StarCitizen= Tools/mediawiki-skins-Citizen/commit/64cb5d7ab3a6dc0381fae54b31e8fc4afadc8b= eb" class=3D"gmail-remarkup-link" target=3D"_blank" rel=3D"noreferrer" styl= e=3D"outline-style:none;text-decoration-line:none;color:rgb(19,108,178)">ht= tps://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/64cb5d7ab3= a6dc0381fae54b31e8fc4afadc8beb</a></p><p style=3D"margin:0px 0px 12px;paddi= ng:0px;border:0px;color:rgb(0,0,0);font-family:"Segoe UI","S= egoe UI Emoji","Segoe UI Symbol",Lato,"Helvetica Neue&q= uot;,Helvetica,Arial,sans-serif;font-size:13px">Citizen<br style=3D"margin-= top:0px">+ (<a href=3D"https://github.com/StarCitizenTools/mediawiki-skins-= Citizen/security/advisories/GHSA-g3cp-pq72-hjpv" class=3D"gmail-remarkup-li= nk" target=3D"_blank" rel=3D"noreferrer" style=3D"outline-style:none;text-d= ecoration-line:none;color:rgb(19,108,178)">https://github.com/StarCitizenTo= ols/mediawiki-skins-Citizen/security/advisories/GHSA-g3cp-pq72-hjpv</a>, CV= E-2025-49579) - Citizen Allows Stored XSS In Menu Heading Message<br><a hre= f=3D"https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/54c= 8717d45ce1594918f11cb9ce5d0ccd8dfee65" class=3D"gmail-remarkup-link" target= =3D"_blank" rel=3D"noreferrer" style=3D"outline-style:none;text-decoration-= line:none;color:rgb(19,108,178)">https://github.com/StarCitizenTools/mediaw= iki-skins-Citizen/commit/54c8717d45ce1594918f11cb9ce5d0ccd8dfee65</a></p><p= style=3D"margin:0px 0px 12px;padding:0px;border:0px;color:rgb(0,0,0);font-= family:"Segoe UI","Segoe UI Emoji","Segoe UI Symbo= l",Lato,"Helvetica Neue",Helvetica,Arial,sans-serif;font-siz= e:13px">TabberNeue<br style=3D"margin-top:0px">+ (<a href=3D"https://github= .com/StarCitizenTools/mediawiki-extensions-TabberNeue/security/advisories/G= HSA-jfj7-249r-7j2m" class=3D"gmail-remarkup-link" target=3D"_blank" rel=3D"= noreferrer" style=3D"outline-style:none;text-decoration-line:none;color:rgb= (19,108,178)">https://github.com/StarCitizenTools/mediawiki-extensions-Tabb= erNeue/security/advisories/GHSA-jfj7-249r-7j2m</a>, CVE-2025-53093) - Tabbe= rNeue Vulnerable To Stored XSS Through Wikitext<br><a href=3D"https://githu= b.com/StarCitizenTools/mediawiki-extensions-TabberNeue/commit/4cdf217ef96da= 74a1503d1dd0bb0ed898fc2a612" class=3D"gmail-remarkup-link" target=3D"_blank= " rel=3D"noreferrer" style=3D"outline-style:none;text-decoration-line:none;= color:rgb(19,108,178)">https://github.com/StarCitizenTools/mediawiki-extens= ions-TabberNeue/commit/4cdf217ef96da74a1503d1dd0bb0ed898fc2a612</a></p><p s= tyle=3D"margin:0px 0px 12px;padding:0px;border:0px;color:rgb(0,0,0);font-fa= mily:"Segoe UI","Segoe UI Emoji","Segoe UI Symbol&= quot;,Lato,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:= 13px">ShortDescription<br style=3D"margin-top:0px">+ (<a href=3D"https://gi= thub.com/StarCitizenTools/mediawiki-extensions-ShortDescription/security/ad= visories/GHSA-p85q-mww9-gwqf" class=3D"gmail-remarkup-link" target=3D"_blan= k" rel=3D"noreferrer" style=3D"outline-style:none;text-decoration-line:none= ;color:rgb(19,108,178)">https://github.com/StarCitizenTools/mediawiki-exten= sions-ShortDescription/security/advisories/GHSA-p85q-mww9-gwqf</a>, CVE-202= 5-53369) - Citizen Short Description Stored XSS Vulnerability Through Wikit= ext<br><a href=3D"https://github.com/StarCitizenTools/mediawiki-extensions-= ShortDescription/commit/bc4fdbaeb1dff127fb6d08c0d385b64aa128c8f8" class=3D"= gmail-remarkup-link" target=3D"_blank" rel=3D"noreferrer" style=3D"outline-= style:none;text-decoration-line:none;color:rgb(19,108,178)">https://github.= com/StarCitizenTools/mediawiki-extensions-ShortDescription/commit/bc4fdbaeb= 1dff127fb6d08c0d385b64aa128c8f8</a></p><p style=3D"margin:0px 0px 12px;padd= ing:0px;border:0px;color:rgb(0,0,0);font-family:"Segoe UI","= Segoe UI Emoji","Segoe UI Symbol",Lato,"Helvetica Neue&= quot;,Helvetica,Arial,sans-serif;font-size:13px">Citizen<br style=3D"margin= -top:0px">+ (<a href=3D"https://github.com/StarCitizenTools/mediawiki-skins= -Citizen/security/advisories/GHSA-rq6g-6g94-jfr4" class=3D"gmail-remarkup-l= ink" target=3D"_blank" rel=3D"noreferrer" style=3D"outline-style:none;text-= decoration-line:none;color:rgb(19,108,178)">https://github.com/StarCitizenT= ools/mediawiki-skins-Citizen/security/advisories/GHSA-rq6g-6g94-jfr4</a>, C= VE-2025-53368) - Citizen Is Vulnerable To Stored XSS Attack In The Legacy S= earch Bar<br><a href=3D"https://github.com/StarCitizenTools/mediawiki-skins= -Citizen/commit/aedbceb3380bb48db6b59e272fc187529c71c8ca" class=3D"gmail-re= markup-link" target=3D"_blank" rel=3D"noreferrer" style=3D"outline-style:no= ne;text-decoration-line:none;color:rgb(19,108,178)">https://github.com/Star= CitizenTools/mediawiki-skins-Citizen/commit/aedbceb3380bb48db6b59e272fc1875= 29c71c8ca</a></p><p style=3D"margin:0px 0px 12px;padding:0px;border:0px;col= or:rgb(0,0,0);font-family:"Segoe UI","Segoe UI Emoji",&= quot;Segoe UI Symbol",Lato,"Helvetica Neue",Helvetica,Arial,= sans-serif;font-size:13px">Citizen<br style=3D"margin-top:0px">+ (<a href= =3D"https://github.com/StarCitizenTools/mediawiki-skins-Citizen/security/ad= visories/GHSA-prmv-7r8c-794g" class=3D"gmail-remarkup-link" target=3D"_blan= k" rel=3D"noreferrer" style=3D"outline-style:none;text-decoration-line:none= ;color:rgb(19,108,178)">https://github.com/StarCitizenTools/mediawiki-skins= -Citizen/security/advisories/GHSA-prmv-7r8c-794g</a>, CVE-2025-53370) - Cit= izen Stored XSS Vulnerability Through Short Descriptions<br><a href=3D"http= s://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/c85a40bddc86= 51fff66df83a72debddcb34f0521" class=3D"gmail-remarkup-link" target=3D"_blan= k" rel=3D"noreferrer" style=3D"outline-style:none;text-decoration-line:none= ;color:rgb(19,108,178)">https://github.com/StarCitizenTools/mediawiki-skins= -Citizen/commit/c85a40bddc8651fff66df83a72debddcb34f0521</a></p><p style=3D= "margin:0px 0px 12px;padding:0px;border:0px;color:rgb(0,0,0);font-family:&q= uot;Segoe UI","Segoe UI Emoji","Segoe UI Symbol",L= ato,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px">U= rlShortener<br style=3D"margin-top:0px">+ (<a href=3D"https://phabricator.w= ikimedia.org/T394869" class=3D"gmail-phui-tag-view gmail-phui-tag-type-obje= ct" style=3D"outline-style:none;text-decoration-line:none;color:rgb(0,0,0);= font-weight:bold"><span class=3D"gmail-phui-tag-core-closed" style=3D"text-= decoration-line:line-through;color:rgba(0,0,0,0.5);margin-top:0px"><span cl= ass=3D"gmail-phui-tag-core gmail-phui-tag-color-object" style=3D"color:rgb(= 0,0,0);border:1px solid rgb(199,204,217);border-radius:3px;padding:0px 4px;= background-color:rgb(235,236,238);margin-top:0px">T394869</span></span></a>= , CVE-2025-7056) - Stored XSS in UrlShortener<br><a href=3D"https://gerrit.= wikimedia.org/r/c/mediawiki/extensions/UrlShortener/+/1166268" class=3D"gma= il-remarkup-link" target=3D"_blank" rel=3D"noreferrer" style=3D"outline-sty= le:none;text-decoration-line:none;color:rgb(19,108,178)">https://gerrit.wik= imedia.org/r/c/mediawiki/extensions/UrlShortener/+/1166268</a></p><p style= =3D"margin:0px 0px 12px;padding:0px;border:0px;color:rgb(0,0,0);font-family= :"Segoe UI","Segoe UI Emoji","Segoe UI Symbol"= ;,Lato,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px= ">Quiz<br style=3D"margin-top:0px">+ (<a href=3D"https://phabricator.wikime= dia.org/T394612" class=3D"gmail-phui-tag-view gmail-phui-tag-type-object" s= tyle=3D"outline-style:none;text-decoration-line:none;color:rgb(0,0,0);font-= weight:bold"><span class=3D"gmail-phui-tag-core-closed" style=3D"text-decor= ation-line:line-through;color:rgba(0,0,0,0.5);margin-top:0px"><span class= =3D"gmail-phui-tag-core gmail-phui-tag-color-object" style=3D"color:rgb(0,0= ,0);border:1px solid rgb(199,204,217);border-radius:3px;padding:0px 4px;bac= kground-color:rgb(235,236,238);margin-top:0px">T394612</span></span></a>, C= VE-2025-7057) - Stored XSS in Quiz<br><a href=3D"https://gerrit.wikimedia.o= rg/r/c/mediawiki/extensions/Quiz/+/1166274" class=3D"gmail-remarkup-link" t= arget=3D"_blank" rel=3D"noreferrer" style=3D"outline-style:none;text-decora= tion-line:none;color:rgb(19,108,178)">https://gerrit.wikimedia.org/r/c/medi= awiki/extensions/Quiz/+/1166274</a></p><p style=3D"margin:0px 0px 12px;padd= ing:0px;border:0px;color:rgb(0,0,0);font-family:"Segoe UI","= Segoe UI Emoji","Segoe UI Symbol",Lato,"Helvetica Neue&= quot;,Helvetica,Arial,sans-serif;font-size:13px">The Wikimedia Security Tea= m recommends updating these extensions and/or skins to the current master b= ranch or relevant, supported release branch [2] as soon as possible. Some o= f the referenced Phabricator tasks above _may_ still be private. Unfortunat= ely, when security issues are reported, sometimes sensitive information is = exposed and since Phabricator is historical, we cannot make these tasks pub= lic without exposing this sensitive information. If you have any additional= questions or concerns regarding this update, please feel free to contact <= a href=3D"mailto:[email protected]">[email protected]</a> or file= a security task within Phabricator [3].</p><p style=3D"margin:0px;padding:= 0px;border:0px;color:rgb(0,0,0);font-family:"Segoe UI","Sego= e UI Emoji","Segoe UI Symbol",Lato,"Helvetica Neue"= ;,Helvetica,Arial,sans-serif;font-size:13px">[1]=C2=A0<a href=3D"https://ph= abricator.wikimedia.org/T389312" class=3D"gmail-phui-tag-view gmail-phui-ta= g-type-shade gmail-phui-tag-blue gmail-phui-tag-shade gmail-phui-tag-icon-v= iew" style=3D"outline-style:none;text-decoration-line:none;color:rgb(19,108= ,178);margin-top:0px"><span class=3D"gmail-phui-tag-core" style=3D"color:rg= b(70,76,92);border:1px solid rgb(207,219,227);border-radius:3px;padding:0px= 4px;background:rgb(222,231,248);margin-top:0px"><span class=3D"gmail-visua= l-only gmail-phui-icon-view gmail-phui-font-fa gmail-fa-anchor" aria-hidden= =3D"true" style=3D"display:inline-block;color:rgb(107,116,140);line-height:= 1;margin:0px 4px 0px 2px;font-size:12px"></span>https://phabricator.wikimed= ia.org/T389312</span></a><br>[2]=C2=A0<a href=3D"https://www.mediawiki.org/= wiki/Version_lifecycle" class=3D"gmail-remarkup-link" target=3D"_blank" rel= =3D"noreferrer" style=3D"outline-style:none;text-decoration-line:none;color= :rgb(19,108,178)">https://www.mediawiki.org/wiki/Version_lifecycle</a><br>[= 3]=C2=A0<a href=3D"https://www.mediawiki.org/wiki/Reporting_security_bugs" = class=3D"gmail-remarkup-link" target=3D"_blank" rel=3D"noreferrer" style=3D= "outline-style:none;text-decoration-line:none;color:rgb(19,108,178)">https:= //www.mediawiki.org/wiki/Reporting_security_bugs</a></p></div> --000000000000ecefc8063981eb3a-- --===============7160127627351417428== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ MediaWiki-l mailing list -- [email protected] To unsubscribe send an email to [email protected] https://lists.wikimedia.org/postorius/lists/mediawiki-l.lists.wikimedia.org/ --===============7160127627351417428==--