CVE-2025-62655CWE-89sql-injection

CVE-2025-62655

published October 18, 2025

CVSS
2.1
EPSS
0%
Percentile
21.5
In the wild
Unconfirmed
What it is

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation MediaWiki Cargo extension allows SQL Injection.This issue affects MediaWiki Cargo extension: 1.39, 1.43, 1.44.

The record
Technical detail
CVSS
2.1 · NONE
CVSS v4.0
Not supplied
EPSS
0.00300 · 21.5th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2025-10-18T03:15Z
References (2)
https://phabricator.wikimedia.org/T404016 · c4f26cc8-17ff-4c99-b5e2-38fc1793eacchttps://phabricator.wikimedia.org/T404016 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 17 OCT 22:46Z
    SQL injection in Cargo via Special:CargoExport
    cvelistv5