Cross-Site Scripting Vulnerability in MediaWiki PageTriage Extension by Wikimedia Foundation

CVE-2025-62702

What is CVE-2025-62702?

The MediaWiki PageTriage Extension from the Wikimedia Foundation presents a cross-site scripting vulnerability characterized by improper neutralization of input during web page generation. This flaw enables attackers to execute arbitrary scripts in the context of users’ browsers, potentially compromising sensitive information and user sessions. The vulnerability affects versions prior to 1.44 and poses significant risks if left unaddressed. Mitigation through prompt updates and stringent input validation is strongly advised to ensure the integrity of the web application.

References