CVE-2025-53502: Wikimedia Foundation Mediawiki - Featuredfeeds Extension

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper Input Validation vulnerability in Wikimedia Foundation Mediawiki - FeaturedFeeds Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - FeaturedFeeds Extension: 1.39.X, 1.42.X, 1.43.X.

Affected products

• Wikimedia Foundation Mediawiki - Featuredfeeds Extension: from 1.39, before 1.40 (fixed in 1.40); from 1.42, before 1.43 (fixed in 1.43); from 1.43, before 1.44 (fixed in 1.44)

Published 2025-07-03. Last modified 2026-06-17.