PT-2025-42667 · Mediawiki · Mediawiki Quizgame

Somerandomdeveloper · Published 2025-10-17 · Updated 2025-10-18 · CVE-2025-62654

Positive Technologies (AI Summary)

CVSS v4.0

2.0

Low

Base vector

AV:N/AC:H/AT:P/PR:H/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/S:N/AU:N/R:U/V:C/RE:M/U:Amber

Name of the Vulnerable Software and Affected Versions MediaWiki QuizGame extension versions 1.39, 1.43, and 1.44

Description A flaw exists in the MediaWiki QuizGame extension related to improper input handling during web page generation, leading to a Stored Cross-site Scripting (XSS) condition. This allows for the injection of malicious scripts into web pages.

Recommendations Update to a newer version of the MediaWiki QuizGame extension that contains a fix for this vulnerability.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-62654

Affected Products

Mediawiki Quizgame

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-62654 · Security Note
• https://t.me/cveNotify/139281 · Telegram Post
• https://t.me/CVEtracker/35236 · Telegram Post
• https://twitter.com/CVEnew/status/1979319143326212464 · Twitter Post
• https://phabricator.wikimedia.org/T403924 · Note