XSS Vulnerability in Wikimedia Foundation's Mediawiki ImageRating Extension

CVE-2025-62664

What is CVE-2025-62664?

The Wikimedia Foundation's Mediawiki - ImageRating Extension is susceptible to a Stored Cross-site Scripting (XSS) vulnerability. This flaw arises from improper neutralization of user input during web page generation. Attackers could exploit this weakness to inject malicious scripts, potentially compromising user sessions or redirecting users to malicious websites. The vulnerability affects versions of the ImageRating Extension prior to 1.39, raising significant concerns for web application security.

References