OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-103437

LOW · CVSS 1.1 EPSS 0.30%

Source: NVD + CISA KEV + EPSS · Published 2026-09-30 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The MediaWiki ReadingLists extension versions 1.46 and 1.45 are vulnerable to reflected cross-site scripting (XSS) due to improper handling of script-related HTML tags. This vulnerability could allow attackers to inject malicious scripts into web pages, potentially compromising user sessions or delivering harmful content. Organizations using these specific versions of the MediaWiki ReadingLists extension should prioritize patching this vulnerability to mitigate the associated risks.

CVE
CVE-2026-103437
Severity
LOW
CVSS
1.1
EPSS
0.30%

Original NVD Description

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki ReadingLists extension allows Reflected XSS. This issue affects MediaWiki ReadingLists extension: 1.46 and 1.45.