CVE-2026-58032

creationtimestamp| type| source ---|---|--- 2026-07-01 16:09:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplvo45xtq25 2026-07-02 02:50:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmzjiwlwc22 2026-07-02 07:01:01+00:00| seen|...

CVE-2026-58032 mw.Api.getErrorMessage() may return injected HTML if used without errorformat=html

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Api/index.Js. This issue affects MediaWiki: from before 1.46.0, 1.45.4, 1.44.6,...

CVE-2026-58032

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Api/index.Js. This issue affects MediaWiki: from before 1.46.0, 1.45.4, 1.44.6,...