CVE-2026-103443

The MediaWiki Collection (Book) extension versions 1.43, 1.45, and 1.46 are vulnerable to a basic cross-site scripting (XSS) flaw due to improper handling of script-related HTML tags, which can allow attackers to inject malicious scripts targeting non-script elements. While the severity is rated low, organizations using these specific versions should prioritize patching this vulnerability to mitigate potential exploitation risks. Users and administrators of affected MediaWiki installations should assess their exposure and apply necessary updates.