OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-103585

LOW · CVSS 1.2 EPSS 0.30%

Source: NVD + CISA KEV + EPSS · Published 2026-09-30 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The MediaWiki MediaSearch extension versions 1.43, 1.45, and 1.46 are vulnerable to a basic Cross-Site Scripting (XSS) attack due to improper handling of script-related HTML tags. This flaw could allow an attacker to inject malicious scripts into web pages, potentially compromising user data or session integrity. Organizations using these specific versions of the MediaWiki extension should prioritize patching to mitigate the risk of exploitation.

CVE
CVE-2026-103585
Severity
LOW
CVSS
1.2
EPSS
0.30%

Original NVD Description

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki MediaSearch extension allows Cross-Site Scripting (XSS). This issue affects MediaWiki MediaSearch extension: 1.46, 1.45, and 1.43.