Cross-site Scripting Vulnerability in Wikimedia Foundation's MediaWiki

CVE-2026-58037

What is CVE-2026-58037?

This vulnerability in Wikimedia's MediaWiki allows for improper neutralization of input during web page generation, leading to exposure of sensitive user data and potential site manipulation. It affects several versions, including those prior to 1.46.0 and specific point releases, indicating a risk for users and administrators reliant on these earlier software iterations. Proper patching and secure coding practices are essential to mitigate such vulnerabilities.

References