MEDIUM 4.8 NVD
CVE-2026-100383
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - WikiLambda Extensi
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - WikiLambda Extension allows Cross-Site Scripting (XSS).
This issue affects Mediawiki - WikiLambda Extension: 1.47.0-alpha. The issue has been remediated on the `master` branch.
References
- https://gerrit.wikimedia.org/r/c/mediawiki/extensions/WikiLambda/+/1326391
- https://phabricator.wikimedia.org/T434967
This medium severity vulnerability with a CVSS score of 4.8 was published on 2026-09-25 via NVD.
vulnfeed aggregates 11568 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.