The Wikimedia Foundation MediaWiki CookieConsent extension vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting The Wikimedia Foundation MediaWiki CookieConsent extension: 1 record(s), with affected versions and fixes.
CVE-2025-62659
Low · 2.1
CWE-79 Oct 22, 2025
The CookieConsent extension does not properly use reserved data attributes, thus introducing potential XSS vectors
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki CookieConsent extension allows Cross-Site Scripting (XSS).This issue affects MediaWiki CookieConsent extension: from v0.1.0 before v2.0.0.