The vulnerabilities in the following files include/api/apiFormatBase.php, includes/api/apiHelp.php, includes/resourceLoader/module.php, includes/hooks/handlers/pageDisplayHookHandler.php, and includes/logFormatter/permissionChangeLogFormatter.php are related to the software used for implementing the MediaWiki hypertext environment. These vulnerabilities allow attackers to perform cross-site scripting (XSS) attacks.

The vulnerability in the scripts included/api/apiFormatBase.php, includes/api/apiHelp.php, includes/resourceLoader/module.php, includes/hooks/handlers/pageDisplayHookHandler.php, and includes/logFormatter/permissionChangeLogFormatter.php, which are used for implementing the MediaWiki hypertext...

CVE-2026-58028: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation CentralAuth. This vulnerability is associated with program files includes/Api/ApiFormatBase.Php, includes/Api/ApiHelp.Php,...

CVE-2014-2244: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the formatHTML function in includes/api/ApiFormatBase.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and 1.22.x before 1.22.3 allows remote attackers to inject arbitrary web script or HTML via a crafted string located after http:// in t...