Cross-site Scripting Vulnerability in Wikimedia Foundation Mediawiki - Quiz Extension
CVE-2025-7057
What is CVE-2025-7057?
The Mediawiki - Quiz Extension by Wikimedia Foundation contains a Cross-site Scripting (XSS) vulnerability due to improper neutralization of user inputs during web page generation. This flaw allows an attacker to inject malicious scripts that can be stored and executed by unsuspecting users, potentially leading to unauthorized access to sensitive information or manipulation of user sessions. It is crucial for users of the affected versions to apply necessary updates and patches to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Mediawiki - Quiz Extension 1.39.x < 1.39.13
Mediawiki - Quiz Extension 1.42.x < 1.42.7
Mediawiki - Quiz Extension 1.43.x < 1.43.2
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved
