Skip to content
OpenAdvisories
High WID-SEC-2025-2341 17 CVEs

MediaWiki Extensions: Mehrere Schwachstellen ermöglichen Codeausführung

Published Oct 20, 2025 · Updated Oct 22, 2025 · Revision 2 · de-DE

Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in MediaWiki ausnutzen, um beliebigen Code oder SQL-Befehle auszuführen, Cross-Site-Scripting-Angriffe durchzuführen und vertrauliche Informationen offenzulegen.

Product

MediaWiki ist ein freies Wiki, das ursprünglich für den Einsatz auf Wikipedia entwickelt wurde.

Vulnerabilities 17

  • Critical 9.1
    CVE-2025-53371

    DiscordNotifications allows DOS, SSRF, and possible RCE through requests to user-controlled URLs

    DiscordNotifications is an extension for MediaWiki that sends notifications of actions in your Wiki to a Discord channel. DiscordNotifications allows sending requests via curl and file_get_contents to arbitrary URLs set via $wgDiscordIncomingWebhookUrl and $w…

    miraheze DiscordNotifications
  • High 8.8
    CVE-2025-62697

    Improperly sanitized style parameter in LanguageSelector

    Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in The Wikimedia Foundation Mediawiki - LanguageSelector Extension allows Code Injection.This issue affects Mediawiki - LanguageSelector Extension…

    The Wikimedia Foundation Mediawiki - LanguageSelector Extension mediawiki Web / CMS Ubuntu
  • High 8.7
    CVE-2025-53625

    DynamicPageList3 exposes hidden/suppressed usernames

    The DynamicPageList3 extension is a reporting tool for MediaWiki, listing category members and intersections with various formats and details. Several #dpl parameters can leak usernames that have been hidden using revision deletion, suppression, or the hideus…

    Universal-Omega DynamicPageList3 universal-omega/dynamic-page-list3 Packagist
  • High 8.6
    CVE-2025-59332

    3DAlloy allows stored XSS through attributes provided to the 3d parser tag/function

    3DAlloy is a lightWeight 3D-viewer for MediaWiki. From 1.0 through 1.8, the <3d> parser tag and the {{#3d}} parser function allow users to provide custom attributes that are then appended to the canvas HTML element that is being output by the extension. The a…

    dolfinus 3DAlloy
  • High 8.6
    CVE-2025-59839

    Star Citizen EmbedVideo Extension Stored XSS through wikitext caused by usage of non-reserved data attributes

    The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for embedding video clips from various video sharing services. In versions 4.0.0 and prior, the EmbedVideo extension allows adding arbitrary attr…

    StarCitizenWiki mediawiki-extensions-EmbedVideo starcitizenwiki/embedvideo Web / CMS Packagist
  • High 7.5
    CVE-2025-62658

    SQL injection in WatchAnalytics through Special:ClearPendingReviews

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation MediaWiki WatchAnalytics extension allows SQL Injection.This issue affects MediaWiki WatchAnalytics extension: 1.43, 1.44.

    The Wikimedia Foundation MediaWiki WatchAnalytics extension mediawiki Web / CMS Ubuntu
  • High 7.3
    CVE-2025-54865

    Tilesheets MediaWiki Extension is Vulnerable to Potential SQL Injection

    Tilesheets MediaWiki Extension adds a table lookup parser function for an item and returns the requested image. A missing backtick in a query executed by the Tilesheets extension allows users to insert and potentially execute malicious SQL code. This issue ha…

    FTB-Gamepedia Tilesheets
  • Medium 6.9
    CVE-2025-62693

    Stored XSS through system messages in LastModified

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - LastModified Extension allows Stored XSS.This issue affects Mediawiki - LastModified Extension: from master befor…

    The Wikimedia Foundation Mediawiki - LastModified Extension mediawiki Web / CMS Ubuntu
  • Medium 6.9
    CVE-2025-62694

    Stored XSS through a system message

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - WikiLove Extension allows Stored XSS.This issue affects Mediawiki - WikiLove Extension: 1.39.

    The Wikimedia Foundation Mediawiki - Wikilove Extension mediawiki Web / CMS Ubuntu
  • Medium 6.9
    CVE-2025-62695

    Stored XSS through system messages

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Stored XSS.This issue affects Mediawiki - WikiLambda Extension: master.

    The Wikimedia Foundation MediaWiki WikiLambda extension mediawiki Web / CMS Ubuntu
  • Medium 6.9
    CVE-2025-62696

    Multiple critical security issues in Springboard

    Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in The Wikimedia Foundation Mediawiki Foundation - Springboard Extension allows Command Injection.This issue affects Mediawiki Foundation - Springboard Extension…

    The Wikimedia Foundation Mediawiki Foundation - Springboard Extension mediawiki Web / CMS Ubuntu
  • Medium 6.9
    CVE-2025-62698

    Stored XSS through system messages in ExternalGuidance

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - ExternalGuidance allows Stored XSS.This issue affects Mediawiki - ExternalGuidance: from master before 1.39.

    The Wikimedia Foundation Mediawiki - ExternalGuidance mediawiki Web / CMS Ubuntu
  • Medium 6.9
    CVE-2025-62699

    Special:Translate tool does not use the correct IP and User-Agent in the CheckUser tool

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in The Wikimedia Foundation Mediawiki - Translate Extension allows Footprinting. Translate extension appears to use jobs to make edits to translation pages. This causes the CheckUser too…

    The Wikimedia Foundation Mediawiki - Translate Extension mediawiki Web / CMS Ubuntu
  • Medium 6.9
    CVE-2025-62700

    Stored XSS through a system message in MultiBoilerplate

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - MultiBoilerplate Extensionmaste allows Stored XSS.This issue affects Mediawiki - MultiBoilerplate Extensionmaste:…

    The Wikimedia Foundation Mediawiki - MultiBoilerplate Extensionmaste mediawiki Web / CMS Ubuntu
  • Medium 5.8
    CVE-2025-62656

    GlobalBlocking Special:GlobalBlockList vulnerable to message key stored XSS

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki GlobalBlocking extension allows Stored XSS.This issue affects MediaWiki GlobalBlocking extension: 1.43, 1.44.

    The Wikimedia Foundation MediaWiki GlobalBlocking extension mediawiki Web / CMS Ubuntu
  • Medium 5.8
    CVE-2025-62657

    Stored XSS through system messages in PageForms

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki PageForms extension allows Stored XSS.This issue affects MediaWiki PageForms extension: 1.44.

    The Wikimedia Foundation MediaWiki PageForms extension mediawiki Web / CMS Ubuntu
  • Low 2.1
    CVE-2025-62659

    The CookieConsent extension does not properly use reserved data attributes, thus introducing potential XSS vectors

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki CookieConsent extension allows Cross-Site Scripting (XSS).This issue affects MediaWiki CookieConsent extension: fro…

    The Wikimedia Foundation MediaWiki CookieConsent extension Web / CMS

Revision history

  1. #2

    CVE's ergänzt

  2. #1

    Initiale Fassung

References