PT-2025-42863 · Unknown+1 · Wikistories+1

Somerandomdeveloper · Published 2025-10-21 · Updated 2025-10-21 · CVE-2025-62701

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Mediawiki - Wikistories versions prior to 1.44

Description A flaw exists in Mediawiki - Wikistories related to improper input handling during web page generation, potentially leading to Stored Cross-site Scripting (XSS). This issue could allow an attacker to inject malicious scripts into web pages viewed by other users. The vulnerability affects the Wikistories component of Mediawiki.

Recommendations Update to a version newer than 1.44.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-62701

Affected Products

Mediawiki

Wikistories

References · 10

• 🔥 https://phabricator.wikimedia.org/T400545 · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-62701 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-62701 · Security Note
• https://ubuntu.com/security/CVE-2025-62701 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-62701 · Security Note
• https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Wikistories/+/1189218 · Note
• https://t.me/cveNotify/139555 · Telegram Post
• https://twitter.com/CVEnew/status/1980497450021347466 · Twitter Post
• https://t.me/cveNotify/139604 · Telegram Post
• https://t.me/CVEtracker/35381 · Telegram Post