CVE-2026-103445

The MediaWiki Page_Forms extension versions 1.46, 1.45, and 1.43 are vulnerable to a stored cross-site scripting (XSS) attack due to improper handling of script-related HTML tags. This vulnerability could allow an attacker to inject malicious scripts into web pages viewed by users, potentially compromising user data and session integrity. Organizations using these specific versions of the MediaWiki Page_Forms extension should prioritize patching to mitigate the risk of exploitation.