CVE-2025-62653CWE-79cross-site-scripting
CVE-2025-62653
published October 18, 2025
What it is
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki PollNY extension allows Stored XSS.This issue affects MediaWiki PollNY extension: 1.39, 1.43, 1.44.
The record
Technical detail
- CVSS
- 2.0 · NONE
- CVSS v4.0
- Not supplied
- EPSS
- 0.00308 · 22.4th percentile
- Weakness
- CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- Published
- 2025-10-18T03:15Z
References (1)
EPSS history
Timeline