Cross-site Scripting Vulnerability in Wikimedia Foundation's MediaWiki - AdvancedSearch Extension

CVE-2025-62662

What is CVE-2025-62662?

The MediaWiki - AdvancedSearch Extension developed by Wikimedia Foundation is susceptible to a vulnerability allowing for stored Cross-site Scripting (XSS). This flaw arises from inadequate input sanitization during the generation of web pages, potentially enabling an attacker to inject malicious scripts. Users visiting affected pages may unwittingly execute these harmful scripts, compromising their security and privacy. This issue affects all versions of the AdvancedSearch Extension from master prior to version 1.39.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References