Cross-site Scripting Vulnerability in Wikimedia Mediawiki MultiBoilerplate Extension

CVE-2025-62700

What is CVE-2025-62700?

A Cross-site Scripting (XSS) vulnerability has been identified in the MultiBoilerplate Extension of Wikimedia's Mediawiki platform. This vulnerability allows an attacker to inject malicious scripts that can be executed in the context of the user's browser, potentially leading to the unauthorized disclosure of sensitive information or session hijacking. The issue primarily impacts versions of the MultiBoilerplate Extension prior to 1.39, which may expose users to exploitation through crafted web content. It is essential for users to update to the latest version to mitigate these risks.

References