CVE-2025-62697

Publication date

2025-10-20 19:27:03

Family

wikimedia-foundation

State

PUBLISHED

Description

Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) vulnerability in The Wikimedia Foundation Mediawiki - LanguageSelector Extension allows Code Injection.This issue affects Mediawiki - LanguageSelector Extension: from master before 1.39.