CVE-2025-54865 – Tilesheets MediaWiki SQL Injection Vulnerability

CVE ID : CVE-2025-54865

Published : Aug. 5, 2025, 1:15 a.m. | 27 minutes ago

Description : Tilesheets MediaWiki Extension adds a table lookup parser function for an item and returns the requested image. A missing backtick in a query executed by the Tilesheets extension allows users to insert and potentially execute malicious SQL code. This issue has not been fixed.

Severity: 7.3 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…