2
/ 10
LOW
CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/S:N/AU:N/R:U/V:C/RE:M/U:Amber
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki QuizGame extension allows Stored XSS.This issue affects MediaWiki QuizGame extension: 1.39, 1.43, 1.44.
Basic Information
ID
CVE-2025-62654
Source
wikimedia-foundation
Published
Oct 17, 2025 at 22:38
Affected Product
Vendor
The Wikimedia Foundation
Product
MediaWiki QuizGame extension
Version
1.39
Affected Versions
The Wikimedia Foundation MediaWiki QuizGame extension 1.39
The Wikimedia Foundation MediaWiki QuizGame extension 1.43
The Wikimedia Foundation MediaWiki QuizGame extension 1.44
The Wikimedia Foundation MediaWiki QuizGame extension 1.43
The Wikimedia Foundation MediaWiki QuizGame extension 1.44