Cross-site Scripting Vulnerability in Wikimedia Foundation's Mediawiki - WikiLambda Extension
CVE-2025-62695
What is CVE-2025-62695?
A Cross-site Scripting (XSS) vulnerability has been identified in the Mediawiki - WikiLambda Extension developed by the Wikimedia Foundation. This vulnerability arises from improper neutralization of user input during web page generation, which can lead to stored XSS attacks. When exploited, this flaw allows attackers to inject malicious scripts that could be executed in the context of a user’s session, posing significant security risks. As a result, sensitive user data could be compromised, and the integrity of the affected websites may be jeopardized.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Mediawiki - WikiLambda Extension master
References
CVSS V4
Timeline
Vulnerability published
Vulnerability Reserved
