CVE-2025-62701

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - Wikistories allows Stored XSS.This issue affects Mediawiki - Wikistories: from master before 1.44...

CVE-2025-62701

CVE-2025-62701 concerns a stored XSS in the Wikimedia Foundation MediaWiki Wikistories extension. The issue is caused by improper neutralization of input during web page generation, enabling stored XSS. Affected component: Wikistories (extension) as used in MediaWiki, with impact on versions from...