Vulnerability in The Wikimedia Foundation MediaWiki - Languageselector Extension
CVE-2025-62697
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in The Wikimedia Foundation Mediawiki - LanguageSelector Extension allows Code Injection.This issue affects Mediawiki - LanguageSelector Extension: from master before 1.39.
EPSS: 0.003 (24.8th percentile) — read the EPSS interpretation.
Affected products
- The Wikimedia Foundation Mediawiki - Languageselector Extension — versions master