The Wikimedia Foundation MediaWiki GlobalBlocking extension vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting The Wikimedia Foundation MediaWiki GlobalBlocking extension: 1 record(s), with affected versions and fixes.
CVE-2025-62656
Medium · 5.8
CWE-79 Oct 20, 2025
GlobalBlocking Special:GlobalBlockList vulnerable to message key stored XSS
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki GlobalBlocking extension allows Stored XSS.This issue affects MediaWiki GlobalBlocking extension: 1.43, 1.44.