XSS in The Wikimedia Foundation MediaWiki Cookieconsent Extension
CVE-2025-62659
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki CookieConsent extension allows Cross-Site Scripting (XSS).This issue affects MediaWiki CookieConsent extension: from v0.1.0 before v2.0.0.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.003 (19.7th percentile) — read the EPSS interpretation.
Affected products
- The Wikimedia Foundation Mediawiki Cookieconsent Extension — versions v2.0.0, v0.1.0