Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki CookieConsent extension allows Cross-Site Scripting (XSS).This issue affects MediaWiki CookieConsent extension: from v0.1.0 before v2.0.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| The Wikimedia Foundation | MediaWiki CookieConsent extension | v0.1.0 – < v2.0.0 | v2.0.0 |
Advisories 1
- WID-SEC-2025-2341 MediaWiki Extensions: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Oct 22, 2025