CVE-2026-103049

A flaw was found in the MediaWiki Cargo extension. This vulnerability allows a remote attacker to conduct a reflected Cross-Site Scripting XSS attack due to improper input sanitization of table headers on the Special:CargoQuery page. By enticing a user to follow a specially crafted link, an...