CVE-2026-100238 Flow colon-separator and flow-guidedtour-optin-welcome-description messages allow stored XSS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - Flow Extension allows Stored XSS. This issue affects Mediawiki - Flow Extension: from before 1.46.1, 1.45.5, 1.43.10...

CVE-2026-100238 Flow colon-separator and flow-guidedtour-optin-welcome-description messages allow stored XSS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - Flow Extension allows Stored XSS. This issue affects Mediawiki - Flow Extension: from before 1.46.1, 1.45.5, 1.43.10...

CVE-2026-100238

The Wikimedia Foundation Mediawiki - Flow Extension is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. Specifically, the flow colon-separator and flow-guidedtour-optin-welcome-description messages allow for the injection of malic...

DEBIAN-CVE-2009-4500

The processtrap function in trapper/trapper.c in Zabbix Server before 1.6.6 allows remote attackers to cause a denial of service crash via a crafted request with data that lacks an expected : colon separator, which triggers a NULL pointer dereference...

CVE-2002-0729: Undefined Security Weakness

Microsoft SQL Server 2000 allows remote attackers to cause a denial of service via a malformed 0x08 packet that is missing a colon separator...