Cross-Site Scripting Vulnerability in MediaWiki - ProofreadPage Extension

CVE-2026-0670

What is CVE-2026-0670?

A Cross-Site Scripting (XSS) vulnerability exists in the MediaWiki - ProofreadPage Extension, where improper neutralization of user input during web page generation could allow attackers to inject malicious scripts. This impacts multiple versions of the extension, allowing unauthorized execution of scripts in the context of a user's session or website, potentially leading to data theft or defaced content.

References