Cross-Site Scripting Vulnerability in Wikimedia's MediaWiki LastModified Extension

CVE-2025-62693

What is CVE-2025-62693?

An improper neutralization of input during web page generation in the LastModified Extension of Wikimedia's MediaWiki can lead to stored Cross-Site Scripting (XSS) vulnerabilities. This flaw allows an attacker to inject malicious scripts into web pages viewed by other users, potentially compromising user sessions or delivering harmful payloads. Affected versions include all prior to 1.39. It is crucial for users of this extension to evaluate their risk and seek mitigation strategies to enhance their web security.

References