CVE-2025-67479
Unknown
Unknown - Not Provided
Cross-Site Scripting in MediaWiki CoreParser and Sanitizer
Publication date: 2026-02-03
Last updated on: 2026-02-03
Assigner: wikimedia-foundation
Description
Description
Vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Cite. This vulnerability is associated with program files includes/Parser/CoreParserFunctions.Php, includes/Parser/Sanitizer.Php.
This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1; Cite: from * before 1.39.14, 1.43.4, 1.44.1.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| wikimedia_foundation | mediawiki | to 1.39.14 (exc) |
| wikimedia_foundation | cite | to 1.39.14 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |