CVE-2025-62659: The Wikimedia Foundation Mediawiki Cookieconsent Extension

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki CookieConsent extension allows Cross-Site Scripting (XSS).This issue affects MediaWiki CookieConsent extension: from v0.1.0 before v2.0.0.

Affected products

• The Wikimedia Foundation Mediawiki Cookieconsent Extension: from v0.1.0, before v2.0.0 (fixed in v2.0.0)

Published 2025-10-22. Last modified 2026-10-08.