OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-103438

LOW · CVSS 0.3 EPSS 0.11%

Source: NVD + CISA KEV + EPSS · Published 2026-09-30 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The MediaWiki Wikistories extension is vulnerable to a basic Cross-Site Scripting (XSS) attack due to improper handling of Script-Related HTML tags. This flaw could allow an attacker to inject malicious scripts into web pages, potentially compromising user data or session integrity. Organizations using affected versions (1.46, 1.45, and 1.43) should prioritize remediation to mitigate the risk of exploitation.

CVE
CVE-2026-103438
Severity
LOW
CVSS
0.3
EPSS
0.11%

Original NVD Description

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki Wikistories extension allows Cross-Site Scripting (XSS). This issue affects MediaWiki Wikistories extension: 1.46, 1.45, and 1.43.