Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 03:17:59 +0000 CVE-2025-61655 — Stored XSS through system messages in VisualEditor https://cve.radiocsirt.org/vuln/cve-2025-61655 <p><strong>Affected:</strong> Wikimedia Foundation VisualEditor</p> <p>Improper Neutralization of Input During Web Page Generation (XSS or &#39;Cross-site Scripting&#39;) vulnerability in Wikimedia Foundation VisualEditor. This vulnerability is associated with program files includes/ApiVisualEditorEdit.Php, modules/ve-mw/init/targets/ve.Init.Mw.DesktopArticleTarget.Js, modules/ve-mw/ui/dialogs/ve.Ui.MWSaveDialog.Js.</p> <p>This issue affects VisualEditor: from * before 1.39.14, 1.43.4, 1.44.1.</p> <p><strong>Affected:</strong> Wikimedia Foundation VisualEditor</p> <p>Improper Neutralization of Input During Web Page Generation (XSS or &#39;Cross-site Scripting&#39;) vulnerability in Wikimedia Foundation VisualEditor. This vulnerability is associated with program files includes/ApiVisualEditorEdit.Php, modules/ve-mw/init/targets/ve.Init.Mw.DesktopArticleTarget.Js, modules/ve-mw/ui/dialogs/ve.Ui.MWSaveDialog.Js.</p> <p>This issue affects VisualEditor: from * before 1.39.14, 1.43.4, 1.44.1.</p> https://cve.radiocsirt.org/vuln/cve-2025-61655