VULNERABILITY INTELLIGENCE

CVE-2025-62655

EPSS probability0.30%
CISA KEVNot currently listed
Published2025-10-17
Last modified2026-10-09

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation MediaWiki Cargo extension allows SQL Injection.This issue affects MediaWiki Cargo extension: 1.39, 1.43, 1.44.

Weakness classification

  • c4f26cc8-17ff-4c99-b5e2-38fc1793eacc: CWE-89

Primary references