Cross-Site Scripting Vulnerability in The Wikimedia Foundation's Mediawiki Growth Experiments Extension

CVE-2025-32067

What is CVE-2025-32067?

The Growth Experiments Extension for Mediawiki is susceptible to a Cross-Site Scripting (XSS) attack due to improper input validation. This vulnerability allows malicious users to inject arbitrary web scripts into the application, which can compromise user sessions, steal credentials, or manipulate content. Affected versions include Mediawiki Growth Experiments Extension from 1.39 through 1.43. It is crucial for administrators to apply the necessary updates to mitigate potential security risks.

References