CVE-2025-62700: Stored XSS through a system message in MultiBoilerplate

Published Oct 20, 2025

Updated

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - MultiBoilerplate Extensionmaste allows Stored XSS.This issue affects Mediawiki - MultiBoilerplate Extensionmaste: from master before 1.39.

Affected Software

1 affected component

Wikimedia Foundation Mediawiki - MultiBoilerplate Extension>1.39

Event History

Oct 20, 2025

CVE Published

via MITRE·05:53 PM

Data Sourced

via MITRE·05:53 PM

DescriptionWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2025-62700?

CVE-2025-62700 is rated as a medium severity vulnerability due to the potential for stored cross-site scripting.

How do I fix CVE-2025-62700?

To fix CVE-2025-62700, upgrade Mediawiki - MultiBoilerplate Extension to version 1.39 or later.

Which versions of Mediawiki - MultiBoilerplate Extension are affected by CVE-2025-62700?

CVE-2025-62700 affects all versions of Mediawiki - MultiBoilerplate Extension before version 1.39.

What type of vulnerability is CVE-2025-62700?

CVE-2025-62700 is classified as a cross-site scripting (XSS) vulnerability.

Can CVE-2025-62700 lead to data compromise?

Yes, CVE-2025-62700 can lead to data compromise through exploitation by executing malicious scripts in user browsers.