CVE-2026-103050

The Mediawiki - MassMessage extension is vulnerable to a Stored XSS flaw caused by improper neutralization of input during web page generation. This vulnerability impacts versions before 1.46.1, 1.45.5, and 1.43.10 . No specific exploit details or remediation steps are provided in the documents.

CVE-2024-23176

An issue was discovered in the MassMessage extension in MediaWiki before 1.40.2. For a Special:MassMessage?uselang=x-xss URL, the i18n key massmessage-form-page-help allows XSS...