Security Advisory
CVE-2025-11937
N/A
UNKNOWN
Vulnerability Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - SecurePoll Extension allows Stored XSS.This issue affects Mediawiki - SecurePoll Extension: master.
Published Date
October 18, 2025
Official Source
NIST NVD Advisory