CVE-2025-62665: Stored XSS through system messages in Skin:BlueSky
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - Skin:BlueSky allows Stored XSS.This issue affects Mediawiki - Skin:BlueSky: from master before 1.39.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62665?
CVE-2025-62665 is classified as a medium severity vulnerability due to its potential for stored cross-site scripting attacks.
How do I fix CVE-2025-62665?
To fix CVE-2025-62665, upgrade Mediawiki - Skin:BlueSky to version 1.39 or later.
What are the impacts of CVE-2025-62665?
CVE-2025-62665 may allow attackers to execute arbitrary JavaScript in the context of a victim's browser, potentially leading to data theft or account takeover.
Who is affected by CVE-2025-62665?
CVE-2025-62665 affects users of Mediawiki - Skin:BlueSky versions from master before 1.39.
Is CVE-2025-62665 a common vulnerability?
CVE-2025-62665 is a specific instance of a more common class of vulnerabilities known as cross-site scripting (XSS), and it is relatively prevalent in web applications.