CVE-2026-0670

creationtimestamp| type| source ---|---|--- 2026-01-07 22:11:16+00:00| seen| Telegram/ipFwjj9g48mxDgXlkIbCTi4rmSPejqVfsu52NXWp5xTSCfA...

CVE-2026-0670

The Wikimedia Foundation MediaWiki - ProofreadPage Extension is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This flaw specifically involves a system message and a user-provided parameter , allowing for the injection of malicious scr...