Cross-Site Scripting Vulnerability in Wikimedia Foundation's Mediawiki - Wikibase Extension

CVE-2026-22710

What is CVE-2026-22710?

A Cross-Site Scripting (XSS) vulnerability exists in the Wikimedia Foundation's Mediawiki - Wikibase Extension, allowing attackers to inject malicious scripts into web pages viewed by users. This vulnerability impacts multiple versions of the extension, including 1.45, 1.44, 1.43, and 1.39, potentially compromising user data and enabling unauthorized access to sensitive information. Users are advised to update to the latest versions to mitigate this issue.

References