CVE-2026-0671

The Wikimedia Foundation MediaWiki - UploadWizard extension is vulnerable to Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. This flaw allows an attacker to inject malicious scripts into web pages viewed by other users. The issue affects versions 1.45, ...

EUVD-2025-34962

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - UploadWizard Extension allows Stored XSS.This issue affects Mediawiki - UploadWizard Extension: from master before 1.39...