Wikimedia Foundation MediaWiki - Securepoll Extension
3 CVEs affecting Wikimedia Foundation MediaWiki - Securepoll Extension. Latest disclosed: 2025-07-04. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-53484 | Critical | 9.8 | 2025-07-04 | User-controlled inputs are improperly escaped in: * VotePage.php (poll option input) * ResultPage::getPagesTab() and getErrorsTab() (user-contro… |
CVE-2025-53483 | High | 8.8 | 2025-07-04 | ArchivePage.php, UnarchivePage.php, and VoterEligibilityPage#executeClear() do not validate request methods or CSRF tokens, allowing attackers to trigger sensi… |
CVE-2025-53485 | High | 7.5 | 2025-07-04 | SetTranslationHandler.php does not validate that the user is an election admin, allowing any (even unauthenticated) user to change election-related translation… |