CVE 2 LOW

Stored XSS through system messages in QuizGame_CVE-2025-62654

2 / 10
LOW
CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/S:N/AU:N/R:U/V:C/RE:M/U:Amber

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki QuizGame extension allows Stored XSS.This issue affects MediaWiki QuizGame extension: 1.39, 1.43, 1.44.

Basic Information

ID CVE-2025-62654
Source wikimedia-foundation
Published Oct 17, 2025 at 22:38

Affected Product

Vendor The Wikimedia Foundation
Product MediaWiki QuizGame extension
Version 1.39
Affected Versions The Wikimedia Foundation MediaWiki QuizGame extension 1.39
The Wikimedia Foundation MediaWiki QuizGame extension 1.43
The Wikimedia Foundation MediaWiki QuizGame extension 1.44

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.