https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T17:27:01.620185+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-53485 CVE-2025-53485 — SecurePoll: Unauthorized access to SetTranslationHandler allows arbitrary text changes 2026-10-07T17:27:01.639445+00:00

Affected: Wikimedia Foundation Mediawiki - SecurePoll extension

SetTranslationHandler.php does not validate that the user is an election admin, allowing any (even unauthenticated) user to change election-related translation text. While partially broken in newer MediaWiki versions, the check is still missing.

This issue affects Mediawiki - SecurePoll extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.