Cross-site Scripting Vulnerability in Wikimedia Foundation's MediaWiki - AdvancedSearch Extension

CVE-2025-62662

What is CVE-2025-62662?

The MediaWiki - AdvancedSearch Extension developed by Wikimedia Foundation is susceptible to a vulnerability allowing for stored Cross-site Scripting (XSS). This flaw arises from inadequate input sanitization during the generation of web pages, potentially enabling an attacker to inject malicious scripts. Users visiting affected pages may unwittingly execute these harmful scripts, compromising their security and privacy. This issue affects all versions of the AdvancedSearch Extension from master prior to version 1.39.

References