CVE-2025-62663

Improper Neutralization of Input During Web Page Generation (XSS or ‘Cross-site Scripting’) vulnerability in The Wikimedia Foundation Mediawiki – UploadWizard Extension allows Stored XSS.This issue affects Mediawiki – UploadWizard Extension: from master before 1.39.

More information : https://gerrit.wikimedia.org/r/q/I37ea7c8825e9de776e207b3919b451ba2b905369