← CVE Intelligence

CVE-2026-100383

Stored i18n XSS in WikiLambda's VisualEditor integration PUBLISHED

Description (CNA)

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - WikiLambda Extension allows Cross-Site Scripting (XSS). This issue affects Mediawiki - WikiLambda Extension: 1.47.0-alpha. The issue has been remediated on the `master` branch.

Affected (CNA)

Vendor / productVersions
Wikimedia Foundation / Mediawiki - WikiLambda Extensionaffected 1.47.0-alpha

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.