The vulnerabilities in the following files include/api/apiFormatBase.php, includes/api/apiHelp.php, includes/resourceLoader/module.php, includes/hooks/handlers/pageDisplayHookHandler.php, and includes/logFormatter/permissionChangeLogFormatter.php are related to the software used for implementing the MediaWiki hypertext environment. These vulnerabilities allow attackers to perform cross-site scripting (XSS) attacks.

The vulnerability in the scripts included/api/apiFormatBase.php, includes/api/apiHelp.php, includes/resourceLoader/module.php, includes/hooks/handlers/pageDisplayHookHandler.php, and includes/logFormatter/permissionChangeLogFormatter.php, which are used for implementing the MediaWiki hypertext...

CVE-2026-58028: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation CentralAuth. This vulnerability is associated with program files includes/Api/ApiFormatBase.Php, includes/Api/ApiHelp.Php,...