OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-103439

LOW · CVSS 0.3 EPSS 0.11%

Source: NVD + CISA KEV + EPSS · Published 2026-09-30 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The MediaWiki Wikbase extension versions 1.46, 1.45, and 1.43 are vulnerable to a basic Cross-Site Scripting (XSS) due to improper handling of script-related HTML tags. This vulnerability could allow attackers to inject malicious scripts into web pages, potentially compromising user data or session integrity. Organizations using these specific versions of the MediaWiki Wikbase extension should prioritize remediation to mitigate the risk of exploitation.

CVE
CVE-2026-103439
Severity
LOW
CVSS
0.3
EPSS
0.11%

Original NVD Description

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki Wikbase extension allows Cross-Site Scripting (XSS). This issue affects MediaWiki Wikbase extension: 1.46, 1.45, and 1.43.