https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T06:29:02.762980+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-53484 CVE-2025-53484 — SecurePoll: Multiple locations vulnerable to Cross-Site Scripting (XSS) via unescaped input 2026-10-07T06:29:02.778540+00:00

Affected: Wikimedia Foundation Mediawiki - SecurePoll extension

User-controlled inputs are improperly escaped in:

* VotePage.php (poll option input)

* ResultPage::getPagesTab() and getErrorsTab() (user-controllable page names)

This allows attackers to inject JavaScript and compromise user sessions under certain conditions.

This issue affects Mediawiki - SecurePoll extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.