CVE-2025-62656CWE-79cross-site-scripting
CVE-2025-62656
published October 21, 2025
What it is
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki GlobalBlocking extension allows Stored XSS.This issue affects MediaWiki GlobalBlocking extension: 1.43, 1.44.
The record
Technical detail
- CVSS
- 5.8 · NONE
- CVSS v4.0
- Not supplied
- EPSS
- 0.00269 · 18.1th percentile
- Weakness
- CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- Published
- 2025-10-21T01:15Z
References (1)
EPSS history
Timeline