Stored XSS Vulnerability in MediaWiki WikiForum Extension by Wikimedia Foundation

CVE-2026-103444

What is CVE-2026-103444?

A security flaw in the MediaWiki WikiForum extension by Wikimedia Foundation permits the improper neutralization of script-related HTML tags, leading to Stored XSS vulnerabilities. This issue allows attackers to inject malicious scripts into web pages, which can then be executed in the context of users accessing the forum. Vigilance is essential to safeguard user data and maintain the integrity of the web application. Immediate action is recommended to apply patches and prevent exploitation.

References