Code Injection Vulnerability in MediaWiki LanguageSelector Extension by Wikimedia Foundation

CVE-2025-62697

What is CVE-2025-62697?

A vulnerability exists in the Wikimedia Foundation's MediaWiki - LanguageSelector Extension that allows for malicious code injection due to improper neutralization of special elements. This can enable attackers to execute arbitrary code within the application, affecting the integrity and security of the application environment. The issue is present in all versions prior to 1.39, making prompt updates essential to mitigate risks associated with this security flaw.

References