Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/htmlform/CodexHTMLForm.Php, includes/htmlform/fields/HTMLButtonField.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1.
Remediation
References
Related Vulnerabilities
Ruby 7PK - Security Features Vulnerability (CVE-2015-3900)
axios Improper Input Validation Vulnerability (CVE-2019-10742)
Moodle Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-3625)
Oracle JRE CVE-2013-2415 Vulnerability (CVE-2013-2415)
WordPress Plugin Media File Renamer-Auto & Manual Rename Cross-Site Request Forgery (5.2.5)