CVE-2026-103044

Summary

XML injection (aka blind XPath injection) vulnerability in The Wikimedia Foundation Mediawiki - EasyTimeline extension allows XML Injection.

This issue affects Mediawiki - EasyTimeline extension: before 1.46.1, 1.45.5, 1.43.10.

Affected Software

VendorProductVersion RangeStatus
The Wikimedia FoundationMediawiki - EasyTimeline extension0 < 1.46.1, 1.45.5, 1.43.10affected

Weaknesses

  • CWE-91: CWE-91 XML injection (aka blind XPath injection)

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: total

References