Cross-Site Scripting Vulnerability in Wikimedia's MediaWiki LastModified Extension

CVE-2025-62693

What is CVE-2025-62693?

An improper neutralization of input during web page generation in the LastModified Extension of Wikimedia's MediaWiki can lead to stored Cross-Site Scripting (XSS) vulnerabilities. This flaw allows an attacker to inject malicious scripts into web pages viewed by other users, potentially compromising user sessions or delivering harmful payloads. Affected versions include all prior to 1.39. It is crucial for users of this extension to evaluate their risk and seek mitigation strategies to enhance their web security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References