SQL Injection in The Wikimedia Foundation MediaWiki Watchanalytics Extension
CVE-2025-62658
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation MediaWiki WatchAnalytics extension allows SQL Injection.This issue affects MediaWiki WatchAnalytics extension: 1.43, 1.44.
Vulnerability class: SQL Injection
EPSS: 0.002 (13.0th percentile) — read the EPSS interpretation.
Affected products
- The Wikimedia Foundation Mediawiki Watchanalytics Extension — versions 1.43, 1.44