Cross-Site Scripting Vulnerability in Wikimedia Foundation Mediawiki Wikilove Extension

CVE-2026-22711

What is CVE-2026-22711?

A vulnerability in The Wikimedia Foundation's Mediawiki Wikilove Extension presents a risk of Cross-Site Scripting (XSS) due to improper neutralization of alternate XSS syntax. This issue exists in specific versions of the extension, allowing attackers to execute arbitrary scripts in the context of a user's session. It is vital for users to update to patched versions to mitigate potential exploits. More details can be found in the references provided.

References