14Oca
CVE-2025-23072 | Wikimedia RefreshSpecial Extension up to 1.39.10/1.41.2/1.42.1 on Mediawiki cross site scripting
A vulnerability, which was classified as problematic, has been found in Wikimedia RefreshSpecial Extension up to 1.39.10/1.41.2/1.42.1 on Mediawiki. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2025-23072. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.