CVE-2026-103046

Summary

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Wikimedia Foundation MediaWiki - WikiLambda extension allows Stored XSS.

This issue affects MediaWiki - WikiLambda extension: before 1.46.1.

Affected Software

VendorProductVersion RangeStatus
The Wikimedia FoundationMediawiki - WikiLambda Extension0 < 1.46.1affected

Weaknesses

  • CWE-79: CWE-79 Improper neutralization of input during web page generation ('cross-site scripting')

References