MediaWiki XSS

The vulnerability in the scripts included/api/apiFormatBase.php, includes/api/apiHelp.php, includes/resourceLoader/module.php, includes/hooks/handlers/pageDisplayHookHandler.php, and includes/logFormatter/permissionChangeLogFormatter.php, which are used for implementing the MediaWiki hypertext...

CVE-2026-58028: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation CentralAuth. This vulnerability is associated with program files includes/Api/ApiFormatBase.Php, includes/Api/ApiHelp.Php,...