Skip to content
CVE PROGRAM SOURCE RECORD1.1 Low

CVE-2026-103444

Stored XSS through system messages in WikiForum

Description

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki WikiForum extension allows Stored XSS. This issue affects MediaWiki WikiForum extension: master.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

The Wikimedia Foundation MediaWiki WikiForum extension

Default version status: unaffected

  • masteraffected

References