Vulnerability in Universal-Omega Dynamicpagelist3
CVE-2025-53625
The DynamicPageList3 extension is a reporting tool for MediaWiki, listing category members and intersections with various formats and details. Several #dpl parameters can leak usernames that have been hidden using revision deletion, suppression, or the hideuser block flag. The vulnerability is fixed in 3.6.4.
EPSS: 0.004 (36.6th percentile) — read the EPSS interpretation.
Affected products
- Universal-omega Dynamicpagelist3 — versions < 3.6.4
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)