CVE-2025-62655 – SQL injection in Cargo via Special:CargoExport

CVE ID : CVE-2025-62655

Published : Oct. 17, 2025, 11:15 p.m. | 1 hour, 25 minutes ago

Description : Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in The Wikimedia Foundation MediaWiki Cargo extension allows SQL Injection.This issue affects MediaWiki Cargo extension: 1.39, 1.43, 1.44.

Severity: 2.1 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…