CVE-2025-11937EPSS p37.6%

CVE-2025-11937CVE-2025-11937

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - SecurePoll Extension allows Stored XSS.This issue affects Mediawiki - SecurePoll Extension: master.

Scoring

EPSS0.45% probability of exploitation · percentile 37.6% · 2026-10-17T12:00:28Z
Last modified2026-10-11
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.