CVE-2026-102973

CVE-2026-102973: API email authorization hook bypass Reporter: Marco Paciaroni BomboBombone. MediaWiki's action=emailuser API path did not invoke the EmailUserAuthorizeSend hook. When an extension or site policy used that hook to deny a sender, the web form enforced the denial while the API path...

Exploit for CVE-2026-102973

CVE-2026-102973: API email authorization hook bypass Reporter...