CVE-2026-100377

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - WikiLambda Extension allows Excavation. This issue affects Mediawiki - WikiLambda Extension: 1.47.0-alpha. The issue has been remediated on the master branch...

CVE-2026-100383 Stored i18n XSS in WikiLambda's VisualEditor integration

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - WikiLambda Extension allows Cross-Site Scripting XSS. This issue affects Mediawiki - WikiLambda Extension: 1.47.0-alpha. The issue has been remediated on the...

CVE-2026-100383

The Mediawiki - WikiLambda Extension version 1.47.0-alpha is vulnerable to Cross-Site Scripting (XSS) due to Improper Neutralization of Input During Web Page Generation . An attacker with high privileges and passive user interaction could potentially execute scripts in the context of the victim's...

CVE-2026-100377

The Wikimedia Foundation Mediawiki - WikiLambda Extension (version 1.47.0-alpha ) is vulnerable to an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. This flaw allows revision-deleted pages to be viewed through the extension's action=edit and Special:ViewAbstract functio...