CVE-2026-103445

The MediaWiki Page_Forms extension versions 1.46, 1.45, and 1.43 are vulnerable to a Stored XSS vulnerability. The root cause is the improper neutralization of Script-Related HTML tags in a web page. This flaw allows an attacker to execute malicious scripts in the context of the user's browser. N...

CVE-2026-103445 Stored XSS through PageForms #autoedit redirect links

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki PageForms extension allows Stored XSS. This issue affects MediaWiki PageForms extension: 1.46, 1.45, and 1.43...

CVE-2026-103445 Stored XSS through PageForms #autoedit redirect links

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki PageForms extension allows Stored XSS. This issue affects MediaWiki PageForms extension: 1.46, 1.45, and 1.43...