Wikimedia Foundation MediaWiki LanguageSelector Extension Code Injection Vulnerability
Vulnerability
A code injection vulnerability has been identified in the Wikimedia Foundation MediaWiki LanguageSelector Extension, affecting versions from master prior to 1.39. This vulnerability arises from improper neutralization of special elements in output, which can be exploited by a downstream component.
Impact
Exploitation of this vulnerability allows for arbitrary code execution on the server where the affected MediaWiki instance is running.
Added: Oct 20, 2025, 8:19 PM
Updated: Oct 20, 2025, 8:19 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
7.0remediation
0.0relevance
0.8threat
3.2urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.