CNNVD-202510-2588 Information
Oct 20, 2025
cve
CNNVD ID
CNNVD-202510-2588
Related CVE
- CNNVD Published: 2025-10-20
Description (Chinese)
MediaWiki - ExternalGuidance Extension是MediaWiki开源的一个用于提供外部指导链接或资源的扩展。 MediaWiki - ExternalGuidance Extension存在安全漏洞，该漏洞源于网页生成期间输入中和不当，可能导致存储型跨站脚本攻击。
Description (English)
MediaWiki - ExternalGuidance Extension is an extension of MediaWiki open source to provide external guidance links or resources. MediaWiki-ExternalGuidance Extension has a security loophole, which stems from the inaccuracy of input during the web site generation, which may result in a storage-type cross-site script attack.
Hazard Level
Medium
Vulnerability Type
其他
Affected Vendor
维基媒体
Published
2025-10-20
Last Modified
2026-02-24
References
https://gerrit.wikimedia.org/r/q/I8bfb3c2766982f6633f47ed35720d4d9f51da71d https://phabricator.wikimedia.org/T399662 https://access.redhat.com/security/cve/cve-2025-62698
Patch
https://phabricator.wikimedia.org/T399662
Share on: