EUVD-2026-89094

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wikimedia Foundation Mediawiki - UserPageViewTracker Extension allows SQL Injection. This issue affects Mediawiki - UserPageViewTracker Extension: from before 1.46.1, 1.45.5, 1.43.10...

CVE-2026-102796

The Wikimedia Foundation Mediawiki - UserPageViewTracker Extension is vulnerable to an SQL Injection due to the improper neutralization of special elements used in an SQL command. The vulnerability specifically allows unauthenticated SQL injection via the filterusers and ignoreusers parameters. T...