CVE-2026-100238

The Wikimedia Foundation Mediawiki - Flow Extension is vulnerable to Stored XSS due to improper neutralization of input during web page generation. Specifically, the colon-separator and flow-guidedtour-optin-welcome-description messages allow for script injection. This issue affects versions prio...