CVE-2025-62694 Stored XSS through a system message

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - WikiLove Extension allows Stored XSS.This issue affects Mediawiki - WikiLove Extension: 1.39...

CVE-2025-62664

The CVE-2025-62664 entry describes a Stored XSS in the Wikimedia Foundation Mediawiki ImageRating Extension, exploitable via improper input neutralization in image rating-related functionality. Affected is the ImageRating Extension from master before version 1.39. The connected sources corroborat...