Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation timeline. This vulnerability is associated with program files includes/Timeline.Php, scripts/EasyTimeline.Pl. This issue affects timeline: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

Remediation

References

CVE-2026-58038

Related Vulnerabilities

WordPress Plugin Shortcode Factory Local File Inclusion (2.7)

WordPress Plugin WP Telegram (Auto Post and Notifications) Unspecified Vulnerability (2.1.8)

WordPress Plugin Content Control-User Access Restriction Cross-Site Scripting (1.1.9)

PHP Improper Input Validation Vulnerability (CVE-2017-7189)

WordPress Plugin HUSKY-Products Filter Professional for WooCommerce Unspecified Vulnerability (1.2.6.2)

Severity

Medium

Classification

CVE-2026-58038 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities