CVE-2026-58031 Stored i18n XSS in Special:ApiSandbox when a deprecated module is selected

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Special.Apisandbox/ApiSandboxLayout.Js. This issue affects MediaWiki: from...

CVE-2025-6594

The Wikimedia Foundation MediaWiki software contains a Cross-site Scripting (XSS) vulnerability in the Special:ApiSandbox component. This issue is caused by the improper neutralization of input during web page generation, specifically associated with the program files resources/src/mediawiki.Spec...