Approved changes feed: RSS · Atom

cpe:2.3:a:the_wikimedia_foundation:mediawiki_globalblocking_extension:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorThe Wikimedia Foundation (dcdf6756-005f-5e7c-83d8-02490e2a2a68)
ProductMediawiki Globalblocking Extension (3ee00658-b4f1-5aac-b79a-2a1177607979)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-62656 vulnerable 2026-06-03 15:09:34.893059 GlobalBlocking Special:GlobalBlockList vulnerable to message key stored XSS
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki GlobalBlocking extension allows Stored XSS.This issue affects MediaWiki GlobalBlocking extension: 1.43, 1.44.
Published: 2025-10-20T20:15:14.947Z
Updated: 2025-10-20T20:35:55.124Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.