CVE-2026-30977

creationtimestamp| type| source ---|---|--- 2026-08-15 11:00:02+00:00| published-proof-of-concept| https://t.me/CyberSecurityExploit/30458 2026-08-16 00:00:36+00:00| published-proof-of-concept| https://t.me/CyberSecurityExploit/30458 2026-08-27 20:00:06+00:00| seen|...

CVE-2026-30977

The CVE covers the MediaWiki extension RenderBlocking. Before version 0.1.1, a Stored XSS flaw existed in renderblocking-css when Inline Assets mode was used. Exploitation requires wgRenderBlockingInlineAssets = true and editsitecss user rights. The issue is fixed in 0.1.1. Affected component: re...