← CVE Intelligence

CVE-2026-102796

Unauthenticated SQL injection in UserPageViewTracker via filterusers and ignoreusers parameters PUBLISHED

Description (CNA)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wikimedia Foundation Mediawiki - UserPageViewTracker Extension allows SQL Injection. This issue affects Mediawiki - UserPageViewTracker Extension: from * before 1.46.1, 1.45.5, 1.43.10.

Affected (CNA)

Vendor / productVersions
Wikimedia Foundation / Mediawiki - UserPageViewTracker Extensionaffected * before 1.46.1, 1.45.5, 1.43.10

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.