Security Advisory

CVE-2025-62697

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-10-20 19:27:03
Last updated 2025-10-20 19:38:21
Assigner wikimedia-foundation
CVSS score 8.8
State PUBLISHED

Description

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in The Wikimedia Foundation Mediawiki - LanguageSelector Extension allows Code Injection.This issue affects Mediawiki - LanguageSelector Extension: from master before 1.39.