CVE-2026-103049

The Mediawiki - Cargo extension is vulnerable to Reflected Cross-Site Scripting (XSS) in the Special:CargoQuery page. The root cause is the improper neutralization of input during web page generation, specifically due to unsanitized table headers . This issue affects versions before 1.46.1 . No i...