CVE-2025-54865

Tilesheets MediaWiki Extension adds a table lookup parser function for an item and returns the requested image. A missing backtick in a query executed by the Tilesheets extension allows users to insert and potentially execute malicious SQL code. This issue has not been fixed...

PT-2025-31888

Name of the Vulnerable Software and Affected Versions Tilesheets MediaWiki Extension affected versions not specified Description The Tilesheets MediaWiki Extension includes a table lookup parser function that retrieves images based on item requests. A missing backtick in a query executed by the...