CVE-2025-53625
Severity CVSS v4.0:
HIGH
Type:
Unavailable / Other
Publication date:
10/07/2025
Last modified:
15/07/2025
Description
The DynamicPageList3 extension is a reporting tool for MediaWiki, listing category members and intersections with various formats and details. Several #dpl parameters can leak usernames that have been hidden using revision deletion, suppression, or the hideuser block flag. The vulnerability is fixed in 3.6.4.
Impact
Base Score 4.0
8.70
Severity 4.0
HIGH