Skip to content
OpenAdvisories
Medium · 6.9 CVE-2025-62665 EUVD-2025-34964GHSA-h73w-rr6h-gjf4

Stored XSS through system messages in Skin:BlueSky

Published Oct 18, 2025 · Updated Oct 20, 2025 · Assigned by wikimedia-foundation

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - Skin:BlueSky allows Stored XSS.This issue affects Mediawiki - Skin:BlueSky: from master before 1.39.

Affected products

VendorProductAffectedFixed
Wikimedia Foundation Mediawiki - Skin:BlueSky master – < 1.39 1.39

Advisories 1

References