Cross-Site Scripting Vulnerability in Wikimedia Foundation Mediawiki - Score Extension

CVE-2026-39936

What is CVE-2026-39936?

The Mediawiki - Score Extension by the Wikimedia Foundation contains a vulnerability that allows for improper neutralization of input during web page generation, leading to Cross-Site Scripting (XSS). This vulnerability can enable attackers to inject malicious scripts into otherwise benign web pages, resulting in potential data compromise, unauthorized access, or redirection to malicious sites. It is crucial for users and administrators to implement necessary security patches and to stay informed about updates related to this vulnerability.

References