CVE-2025-62659CWE-79cross-site-scripting
CVE-2025-62659
published October 22, 2025
What it is
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki CookieConsent extension allows Cross-Site Scripting (XSS).This issue affects MediaWiki CookieConsent extension: from v0.1.0 before v2.0.0.
The record
Technical detail
- CVSS
- 2.1 · NONE
- CVSS v4.0
- Not supplied
- EPSS
- 0.00293 · 20.8th percentile
- Weakness
- CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- Published
- 2025-10-22T20:15Z
References (1)
EPSS history
Timeline