CVE-2026-103585

CVE-2026-103585: Stored XSS in MediaSearch QuickView Reporter: Marco Paciaroni BomboBombone. MediaSearch QuickView used CommonsMetadata's LicenseUrl.value directly as a link destination. CommonsMetadata copied the licensetpllink value from an editable file description without restricting its URL...

Exploit for CVE-2026-103585

CVE-2026-103585: Stored XSS in MediaSearch QuickView Reporter...

EUVD-2026-90431

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki MediaSearch extension allows Cross-Site Scripting XSS. This issue affects MediaWiki MediaSearch extension: 1.46, 1.45, and 1.43...

CVE-2026-103585

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki MediaSearch extension allows Cross-Site Scripting XSS. This issue affects MediaWiki MediaSearch extension: 1.46, 1.45, and 1.43...

CVE-2026-103585

A basic Cross-Site Scripting (XSS) vulnerability exists in The Wikimedia Foundation MediaWiki MediaSearch extension due to the improper neutralization of script-related HTML tags. This vulnerability affects versions 1.46, 1.45, and 1.43 . The impact allows for the execution of arbitrary scripts i...

CVE-2026-103585 attacker-controlled javascript license URL via XSS

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki MediaSearch extension allows Cross-Site Scripting XSS. This issue affects MediaWiki MediaSearch extension: 1.46, 1.45, and 1.43...

CVE-2026-103585 attacker-controlled javascript license URL via XSS

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki MediaSearch extension allows Cross-Site Scripting XSS. This issue affects MediaWiki MediaSearch extension: 1.46, 1.45, and 1.43...

CVE-2026-103585: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki MediaSearch extension allows Cross-Site Scripting XSS. This issue affects MediaWiki MediaSearch extension: 1.46, 1.45, and 1.43...

PT-2026-103624

Name of the Vulnerable Software and Affected Versions MediaWiki MediaSearch extension versions 1.43, 1.45, and 1.46 Description Improper neutralization of script-related HTML tags in a web page leads to a Cross-Site Scripting XSS issue. XSS is a flaw that allows an attacker to inject malicious...

EUVD-2021-29031

Malicious code in bioql PyPI...

CVE-2025-53496

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - MediaSearch Extension allows Stored XSS.This issue affects Mediawiki - MediaSearch Extension: from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...

CVE-2025-53496

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - MediaSearch Extension allows Stored XSS.This issue affects Mediawiki - MediaSearch Extension: from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...

CVE-2025-53496 Stored XSS in MediaSearch

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - MediaSearch Extension allows Stored XSS.This issue affects Mediawiki - MediaSearch Extension: from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...

CVE-2025-53496

The Wikimedia Foundation Mediawiki - MediaSearch Extension is vulnerable to Stored Cross-site Scripting (XSS) due to improper input neutralization during web page generation. This vulnerability affects versions 1.42.X before 1.42.7 , 1.43.X before 1.43.2 , as well as versions 1.39.X through 1.39....

CVE-2025-53496

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - MediaSearch Extension allows Stored XSS.This issue affects Mediawiki - MediaSearch Extension: from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...

CVE-2025-53496 Stored XSS in MediaSearch

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - MediaSearch Extension allows Stored XSS.This issue affects Mediawiki - MediaSearch Extension: from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...

CVE-2025-53496: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - MediaSearch Extension allows Stored XSS.This issue affects Mediawiki - MediaSearch Extension: from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...

Wikimedia Mediawiki – MediaSearch Extension security vulnerability

Wikimedia Mediawiki - MediaSearch Extension is a Wikimedia Foundation extension for search. A security vulnerability exists in Wikimedia Mediawiki - MediaSearch Extension versions prior to 1.39.13 and prior to 1.43.2, which stems from improper input neutralization and could lead to a stored...

CVE-2021-42043

An issue was discovered in Special:MediaSearch in the MediaSearch extension in MediaWiki through 1.36.2. The suggestion text a parameter to mediasearch-did-you-mean was not being properly sanitized and allowed for the injection and execution of HTML and JavaScript via the intitle: search operator...

BIT-MEDIAWIKI-2021-42043

An issue was discovered in Special:MediaSearch in the MediaSearch extension in MediaWiki through 1.36.2. The suggestion text a parameter to mediasearch-did-you-mean was not being properly sanitized and allowed for the injection and execution of HTML and JavaScript via the intitle: search operator...