Cross-site Scripting Vulnerability in Wikimedia Foundation's Mediawiki WikiLove Extension

CVE-2025-62694

What is CVE-2025-62694?

The Wikimedia Foundation's Mediawiki - WikiLove Extension contains a Cross-site Scripting (XSS) vulnerability that allows an attacker to inject malicious scripts into web pages viewed by users. This stored XSS flaw can potentially lead to severe data breaches and unauthorized access to sensitive user information, making it crucial for users to update their installations to protect against such threats. It impacts version 1.39 of the Mediawiki - WikiLove Extension.

References