CNNVD-202510-2443 Information

CNNVD ID

CNNVD-202510-2443

CVE-2025-62654

  • CNNVD Published: 2025-10-17

Description (Chinese)

Mediawiki - QuizGame Extension是Mediawiki开源的一个测验管理插件。 Mediawiki - QuizGame Extension 1.39版本、1.43版本和1.44版本存在安全漏洞,该漏洞源于Web页面生成期间输入中和不当,可能导致存储型跨站脚本攻击。

Description (English)

Mediawiki - QuizGame Extension is a test management plugin for the open source of Mediawiki. There is a security loophole in Mediawiki - QuizGame Extension 1.39, 1.43 and 1.44, which originates from the inaccuracy of input during the web page generation, which may lead to a storage-type cross-site script attack.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

维基媒体

Published

2025-10-17

Last Modified

2026-02-24

References

https://phabricator.wikimedia.org/T403924 https://access.redhat.com/security/cve/cve-2025-62654

Patch

https://phabricator.wikimedia.org/T403924

Share on: