Cross-site Scripting Vulnerability in Wikimedia MediaWiki - Wikibase Extension

CVE-2026-100245

What is CVE-2026-100245?

An improper neutralization of input during web page generation in the Wikimedia MediaWiki - Wikibase Extension allows attackers to exploit stored XSS vulnerabilities. This can enable the execution of malicious scripts in the context of users viewing affected pages, potentially leading to unauthorized actions and data exposure. The vulnerability impacts versions prior to 1.46.1, including specific versions 1.45.5 and 1.43.10, necessitating immediate updates to ensure security.

References