CVE-2026-39838

creationtimestamp| type| source ---|---|--- 2026-04-07 20:37:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwn25b2kb27...

CVE-2026-39838 ProofreadPage improperly sanitizes multiline styles using Sanitizer::checkCSS

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Wikimedia Foundation MediaWiki - ProofreadPage Extension allows XSS Targeting Non-Script Elements. The issue has been remediated on the master branch, and in the release branches for MediaWiki...