CVE-2025-7057

Name of the Vulnerable Software and Affected Versions: Mediawiki - Quiz Extension versions 1.39.X through 1.39.12 Mediawiki - Quiz Extension versions 1.42.X through 1.42.6 Mediawiki - Quiz Extension versions 1.43.X through 1.43.1

Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS attacks.

Recommendations: For versions 1.39.X through 1.39.12, update to version 1.39.13 or later. For versions 1.42.X through 1.42.6, update to version 1.42.7 or later. For versions 1.43.X through 1.43.1, update to version 1.43.2 or later.