CVE-2026-0671

The CVE-2026-0671 affects the MediaWiki UploadWizard extension, specifically versions 1.39–1.45. The root cause is improper input neutralization during web page generation, enabling Cross-Site Scripting (XSS). Impact is potential exploitation of XSS in web pages viewed by other users. Remediation...

EUVD-2025-34962

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - UploadWizard Extension allows Stored XSS.This issue affects Mediawiki - UploadWizard Extension: from master before 1.39...