CVE-2025-23080
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Jan 14, 2025
CWE ID 79
Summary
CVE-2025-23080 is an Input Validation error in the Wikimedia Foundation's Mediawiki OpenBadges Extension, leading to a Cross-Site Scripting (XSS) vulnerability. Malicious actors could exploit this flaw to inject malicious scripts into web pages viewed by other users. Affected versions include those from 1.39.X before 1.39.11, 1.41.X before 1.41.3, and 1.42.X before 1.42.2. Users are urged to upgrade to the patched versions to prevent potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Mediawiki