Skip to content
OpenAdvisories
Low · 2.0 CVE-2025-62654 EUVD-2025-34939GHSA-597q-g6cw-53xv

Stored XSS through system messages in QuizGame

Published Oct 17, 2025 · Updated Oct 20, 2025 · Assigned by wikimedia-foundation

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki QuizGame extension allows Stored XSS.This issue affects MediaWiki QuizGame extension: 1.39, 1.43, 1.44.

Affected products

VendorProductAffectedFixed
The Wikimedia Foundation MediaWiki QuizGame extension 1.39, 1.43, 1.44 —

Advisories 1

References