Cross-Site Scripting Vulnerability in MediaWiki - Wikistories by Wikimedia Foundation

CVE-2025-62701

What is CVE-2025-62701?

A stored Cross-Site Scripting (XSS) vulnerability exists in MediaWiki's Wikistories extension, allowing attackers to inject malicious scripts that can be executed in the context of a user's browser. This issue particularly affects versions before 1.44. Users with access to the impacted extension could potentially place malicious content, leading to unauthorized actions or data exposure, which underscores the importance of applying suitable security measures and updates.

References