Cross-Site Scripting Vulnerability in Wikimedia Foundation MediaWiki PollNY Extension

CVE-2025-62653

What is CVE-2025-62653?

The Wikimedia Foundation's MediaWiki PollNY extension is susceptible to a Cross-Site Scripting (XSS) vulnerability due to improper input neutralization during web page generation. This vulnerability enables an attacker to exploit the system and execute arbitrary JavaScript code in the context of logged-in users. It poses a significant security risk to users interacting with the affected versions of the PollNY extension, making it essential for administrators to apply necessary patches or updates to mitigate potential threats.

References