CVE-2025-53369 — Citizen Short Description stored XSS vulnerability through wikitext
Short Description is a MediaWiki extension that provides local short description support. In version 4.0.0, short descriptions are not properly sanitized before being inserted a…
Published: 2025-07-03 · CVSS: 8.6 · CVSS 3.1
Short Description is a MediaWiki extension that provides local short description support. In version 4.0.0, short descriptions are not properly sanitized before being inserted as HTML using mw.util.addSubtitle, allowing any user to insert arbitrary HTML into the DOM by editing a page. This issue has been patched in version 4.0.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7