CNNVD-202510-2581 Information
Oct 20, 2025
cve
CNNVD ID
CNNVD-202510-2581
Related CVE
- CNNVD Published: 2025-10-20
Description (Chinese)
MediaWiki - LanguageSelector Extension是MediaWiki开源的一个语言选择扩展。 MediaWiki - LanguageSelector Extension 1.39之前版本存在安全漏洞，该漏洞源于特殊元素中和不当，可能导致代码注入。
Description (English)
MediaWiki - LanguageSector Extension is a language selection extension for MediaWiki open source. The previous version of MediaWiki - LanguageSelector Extension 1.39 had a security loophole, which originated in a special element and was inappropriate and could lead to code injection.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
维基媒体
Published
2025-10-20
Last Modified
2026-02-24
References
https://phabricator.wikimedia.org/T399724 https://gerrit.wikimedia.org/r/q/I338288e756de4e58a3f1f02a9c205b37f4927935 https://access.redhat.com/security/cve/cve-2025-62697
Patch
https://phabricator.wikimedia.org/T399724
Share on: