The UserPageViewTracker Extension for Mediawiki by Wikimedia Foundation contains an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. This flaw affects multiple versions of the extension prior to 1.46.1, 1.45.5, and 1.43.10. The vulnerability could allow an attacker to manipulate SQL queries executed by the extension. No patch information or vendor advisory details are available to confirm remediation status.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL commands within the context of the Mediawiki UserPageViewTracker Extension database operations. This could lead to unauthorized data access or modification. However, no known exploits in the wild have been reported, and the exact impact depends on the deployment context.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the affected extension and monitoring for suspicious activity related to SQL queries. Avoid deploying untrusted input to the UserPageViewTracker Extension.