CVE-2026-103046

A flaw was found in the MediaWiki WikiLambda extension. Unsafe string replacements on user-provided HTML in the WikifunctionsFragmentRenderer component allow a remote attacker to conduct stored cross-site scripting XSS attacks. By submitting specially crafted input, an attacker can cause arbitrar...