CVE-2025-62697

N/A

Descricao

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in The Wikimedia Foundation Mediawiki - LanguageSelector Extension allows Code Injection.This issue affects Mediawiki - LanguageSelector Extension: from master before 1.39.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado10/20/2025

Ultima modificacao10/21/2025

Fontenvd

Avistamentos honeypot0

Fraquezas (CWE)

CWE-74

Referencias

https://gerrit.wikimedia.org/r/q/I338288e756de4e58a3f1f02a9c205b37f4927935(c4f26cc8-17ff-4c99-b5e2-38fc1793eacc)

https://phabricator.wikimedia.org/T399724(c4f26cc8-17ff-4c99-b5e2-38fc1793eacc)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.