CVE-2025-53482— IPInfo: Message key XSS through several IPInfo messages in infobox and popup
Quick assessment
Affected
Wikimedia Foundation Mediawiki - IPInfo Extension
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Wikimedia Mediawiki - IPInfo Extension是Wikimedia基金会的一个用展示IP信息的扩展。 Wikimedia Mediawiki - IPInfo Extension 1.39.13之前版本、1.42.7之前版本和1.43.2之前版本存在安全漏洞，该漏洞源于输入中和不当，可能导致跨站脚本攻击。
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1189 · Drive-by Compromise
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-53482
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
IPInfo: Message key XSS through several IPInfo messages in infobox and popup
Source: CVE Program / CVE List V5
Vulnerability Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - IPInfo Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - IPInfo Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5
Vulnerability Title
Wikimedia Mediawiki - IPInfo Extension 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Wikimedia Mediawiki - IPInfo Extension是Wikimedia基金会的一个用展示IP信息的扩展。 Wikimedia Mediawiki - IPInfo Extension 1.39.13之前版本、1.42.7之前版本和1.43.2之前版本存在安全漏洞，该漏洞源于输入中和不当，可能导致跨站脚本攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Wikimedia Foundation | Mediawiki - IPInfo Extension | 1.39.x ~ 1.39.13 | - |
|
II. Public POCs for CVE-2025-53482
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-53482
请登录查看更多情报信息。
Same Patch Batch · Wikimedia Foundation · 2025-07-04 · 5 CVEs total
| CVE-2025-53483 | SecurePoll: Multiple admin actions vulnerable to Cross-Site Request Forgery | |
| CVE-2025-53481 | Denial of service vector on ipinfo/v0/norevision | |
| CVE-2025-53485 | SecurePoll: Unauthorized access to SetTranslationHandler allows arbitrary text changes | |
| CVE-2025-53484 | SecurePoll: Multiple locations vulnerable to Cross-Site Scripting (XSS) via unescaped inpu |
IV. Related Vulnerabilities
Same vendor: Wikimedia Foundation
-
CVE-2026-102796
Unauthenticated SQL injection in UserPageViewTracker via fil -
CVE-2026-100245
Stored XSS on Wikibase Special:SetSiteLink via unescaped sys -
CVE-2026-100244
CentralAuth exposes locally suppressed block information via -
CVE-2026-100243
Stored XSS in WikiSEO author and image properties on action= -
CVE-2026-100242
DataTransfer depends on phpspreadsheet version vulnerable to
Same weakness: CWE-79
-
CVE-2026-123472
WordPress Meta Box – WordPress Custom Fields Framework plugi -
CVE-2026-123992
DataEase SVG StaticResourceServer.java StaticResourceServer. -
CVE-2026-121579
WordPress Unlimited Elements For Elementor (Free Widgets, Ad -
CVE-2026-122669
WordPress Everest Forms plugin <= 3.6.3 - Cross Site Scripti -
CVE-2026-121784
WordPress WpBookingly plugin <= 1.4.3 - Cross Site Scripting