Cross-site Scripting Vulnerability in Wikimedia Foundation Mediawiki - Quiz Extension

CVE-2025-7057

What is CVE-2025-7057?

The Mediawiki - Quiz Extension by Wikimedia Foundation contains a Cross-site Scripting (XSS) vulnerability due to improper neutralization of user inputs during web page generation. This flaw allows an attacker to inject malicious scripts that can be stored and executed by unsuspecting users, potentially leading to unauthorized access to sensitive information or manipulation of user sessions. It is crucial for users of the affected versions to apply necessary updates and patches to mitigate this risk.

References