{"id":7732,"date":"2025-07-07T09:55:42","date_gmt":"2025-07-07T09:55:42","guid":{"rendered":"http:\/\/localhost\/?p=7732"},"modified":"2025-07-07T09:55:42","modified_gmt":"2025-07-07T09:55:42","slug":"stored-xss-in-urlshortener","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=7732","title":{"rendered":"Stored XSS in UrlShortener"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nStored XSS in UrlShortener<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-07-07T13:57:25.974Z<\/td>\n<\/tr>\n
Modified<\/th>\n2025-07-07T14:42:48.894Z<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nWikimedia Foundation<\/td>\n<\/tr>\n
Product<\/th>\nMediawiki – UrlShortener Extension<\/td>\n<\/tr>\n
Version<\/th>\n1.42.x<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n
Base Score<\/th>\n0.0 ()<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nA stored XSS vulnerability in the UrlShortener extension for Mediawiki allows attackers to inject malicious scripts, potentially leading to unauthorized actions and data theft. This issue affects versions 1.42.x before 1.42.7 and 1.43.x before 1.43.2.<\/td>\n<\/tr>\n
AI Severity<\/th>\nHigh<\/td>\n<\/tr>\n
AI Vendor<\/th>\nWikimedia Foundation<\/td>\n<\/tr>\n
AI Product<\/th>\nMediawiki – UrlShortener Extension<\/td>\n<\/tr>\n
AI Version<\/th>\n1.42.x, 1.43.x<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n