Cross-Site Scripting Vulnerability in Wikimedia Foundation MediaWiki PollNY Extension

CVE-2025-62653

What is CVE-2025-62653?

The Wikimedia Foundation's MediaWiki PollNY extension is susceptible to a Cross-Site Scripting (XSS) vulnerability due to improper input neutralization during web page generation. This vulnerability enables an attacker to exploit the system and execute arbitrary JavaScript code in the context of logged-in users. It poses a significant security risk to users interacting with the affected versions of the PollNY extension, making it essential for administrators to apply necessary patches or updates to mitigate potential threats.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References