OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-103584

LOW · CVSS 1.1 EPSS 0.29%

Source: NVD + CISA KEV + EPSS · Published 2026-09-30 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The MediaWiki CommonsMetadata extension versions 1.46, 1.45, and 1.43 are vulnerable to a basic Cross-Site Scripting (XSS) attack due to improper handling of Script-Related HTML tags. This vulnerability could allow an attacker to inject malicious scripts into web pages, potentially compromising user data or session integrity. Organizations using the affected versions of MediaWiki should prioritize patching this issue to mitigate the risk of XSS exploitation.

CVE
CVE-2026-103584
Severity
LOW
CVSS
1.1
EPSS
0.29%

Original NVD Description

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki CommonsMetadata extension allows Cross-Site Scripting (XSS). This issue affects MediaWiki CommonsMetadata extension: 1.46, 1.45, and 1.43.