Stored XSS Vulnerability in MediaWiki Page_Forms Extension by Wikimedia Foundation

CVE-2026-103445

What is CVE-2026-103445?

The MediaWiki Page_Forms extension from Wikimedia Foundation contains a vulnerability that allows for stored cross-site scripting (XSS). This issue arises from the improper neutralization of script-related HTML tags within web pages, potentially enabling attackers to inject malicious scripts that execute when users access affected pages. The vulnerability affects specific versions of the Page_Forms extension, emphasizing the need for immediate updates to mitigate security risks.

References