CVE-2025-32071

Published: 2025-04-11T17:15Z

Last Modified: 2025-04-11T20:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Wikidata Extension allows Cross-Site Scripting (XSS) from widthheight message via ImageHandler::getDimensionsString()This issue affects Mediawiki - Wikidata Extension: from 1.39 through 1.43. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt