Wikimedia Foundation Vector

• CVE-2025-61657 None 0.0 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Vector. This vulnerability is associated with program files resources/ 0.3%
• CVE-2025-6596 None 0.0 Vector inserts portlet labels as HTML, allowing for stored XSS through system messages 0.4%