CVE-2025-11175: The Wikimedia Foundation Mediawiki - Discussiontools Extension

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') vulnerability in The Wikimedia Foundation Mediawiki - DiscussionTools Extension allows Regular Expression Exponential Blowup.This issue affects Mediawiki - DiscussionTools Extension: 1.44, 1.43.

Affected products

• The Wikimedia Foundation Mediawiki - Discussiontools Extension: version 1.44 only; version 1.43 only

Published 2026-01-30. Last modified 2026-06-17.