CVE-2025-62663 Stored XSS through a system message in UploadWizard

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - UploadWizard Extension allows Stored XSS.This issue affects Mediawiki - UploadWizard Extension: from master before 1.39...

MediaWiki – UploadWizard Extension Security Vulnerability

Mediawiki - UploadWizard Extension is an open source file upload plugin for Mediawiki. A security vulnerability exists in Mediawiki - UploadWizard Extension master version to versions prior to 1.39, which stems from improper input neutralization during web page generation and could lead to stored...

CVE-2025-62663: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - UploadWizard Extension allows Stored XSS.This issue affects Mediawiki - UploadWizard Extension: from master before 1.39...

PT-2025-42678

Name of the Vulnerable Software and Affected Versions Mediawiki - UploadWizard Extension versions prior to 1.39 Description A flaw exists in the Mediawiki - UploadWizard Extension that allows for Stored Cross-site Scripting XSS. This issue is due to improper neutralization of input during web pag...