CVE-2025-62652

CVE-2025-62652 is a stored XSS in the Wikimedia Foundation MediaWiki WebAuthn extension (versions 1.39, 1.43, 1.44). The underlying issue is improper neutralization of input during web page generation, enabling stored Cross-Site Scripting. Affected component: WebAuthn extension for MediaWiki; imp...