Skip to content
CVE PROGRAM SOURCE RECORD0.0 None

CVE-2026-13706

UrlShortener extension url validation can be bypassed due to difference between php url parsing and WHATWG

Description

Improper input validation vulnerability in Wikimedia Foundation UrlShortener. This vulnerability is associated with program files includes/UrlShortenerUtils.Php.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Wikimedia Foundation UrlShortener

Default version status: unaffected

  • * to ≤ 1.46.0, 1.45.4, 1.44.6, 1.43.9affected

References