CVE-2025-6595 - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MultimediaViewer.This issue affects MultimediaViewer: from * before 1.39.13, 1.42.7, 1.43.2, 1.44.0

Back Back to CVE browser

MEDIUM

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MultimediaViewer.This issue affects MultimediaViewer: from * before 1.39.13, 1.42.7, 1.43.2, 1.44.0

Published Feb 2, 2026

4.7

MEDIUM

CVSS 3.1

EPSS 0.32%

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MultimediaViewer.This issue affects MultimediaViewer: from * before 1.39.13, 1.42.7, 1.43.2, 1.44.0.

Affected products

Vendor Wikimedia Foundation Product MultimediaViewer Default
unaffected
- Version
  -
  Status
  affected
  Constraints
  <1.39.13, 1.42.7, 1.43.2, 1.44.0