CVE-2026-103444

The MediaWiki WikiForum extension is vulnerable to a stored cross-site scripting (XSS) attack due to improper handling of script-related HTML tags. This flaw could allow an attacker to inject malicious scripts that execute in the context of a user's browser, potentially compromising user data or session integrity. Organizations using this extension should prioritize remediation to protect against potential exploitation, despite the low severity rating.