Description
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.5.8 and 1.4.15 allows remote attackers to inject arbitrary web script or HTML via crafted encoded links.
Remediation
References
Related Vulnerabilities
Grafana Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-27876)
XWiki Incorrect Authorization Vulnerability (CVE-2024-38369)
Chamilo Improper Privilege Management Vulnerability (CVE-2026-40291)
WordPress Plugin Mass Pages/Posts Creator Cross-Site Scripting (1.2.2)
Django Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-35193)