CVE-2026-103584

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki CommonsMetadata extension allows Cross-Site Scripting XSS. This issue affects MediaWiki CommonsMetadata extension: 1.46, 1.45, and 1.43...

CVE-2026-103584

The MediaWiki CommonsMetadata extension (versions 1.46, 1.45, and 1.43 ) is vulnerable to a Cross-Site Scripting (XSS) flaw due to the improper neutralization of script-related HTML tags. This vulnerability allows an attacker to execute arbitrary script via an attacker-controlled javascript licen...