CVE-2025-62697CWE-74

CVE-2025-62697

published October 21, 2025

CVSS
8.8
EPSS
0%
Percentile
27.1
In the wild
Unconfirmed
What it is

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in The Wikimedia Foundation Mediawiki - LanguageSelector Extension allows Code Injection.This issue affects Mediawiki - LanguageSelector Extension: from master before 1.39.

The record
Technical detail
CVSS
8.8 · NONE
CVSS v4.0
Not supplied
EPSS
0.00347 · 27.1th percentile
Weakness
CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Published
2025-10-21T00:15Z
References (2)
https://gerrit.wikimedia.org/r/q/I338288e756de4e58a3f1f02a9c205b37f4927935 · c4f26cc8-17ff-4c99-b5e2-38fc1793eacchttps://phabricator.wikimedia.org/T399724 · c4f26cc8-17ff-4c99-b5e2-38fc1793eacc
EPSS history
Timeline
  • 20 OCT 19:27Z
    Improperly sanitized style parameter in LanguageSelector
    cvelistv5