OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-96874

LOW · CVSS 2.3 EPSS 0.20%

Source: NVD + CISA KEV + EPSS · Published 2026-09-25 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The Mediawiki - Cargo extension is vulnerable to a stored cross-site scripting (XSS) flaw due to improper input neutralization during web page generation. This vulnerability could allow an attacker to inject malicious scripts that execute in the context of a user's browser, potentially compromising user data or session integrity. Organizations utilizing the affected versions of the Mediawiki - Cargo extension should prioritize remediation to mitigate the risk of exploitation.

CVE
CVE-2026-96874
Severity
LOW
CVSS
2.3
EPSS
0.20%

Original NVD Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in the Mediawiki - Cargo extension allows Stored XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4.