VYPR
← All advisories
Medium severity6.1OSV Advisory· Published Jul 1, 2026· Updated Jul 9, 2026

CVE-2026-58030

CVE-2026-58030

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation SyntaxHighlight_GeSHi.

This vulnerability is associated with program files includes/SyntaxHighlight.Php.

This issue affects SyntaxHighlight_GeSHi: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

Affected products

4
  • MediaWiki/MediawikiOSV3 versions
    1.43.8, 1.44.5, 1.45.3, …+ 2 more
    • (no CPE)range: 1.43.8, 1.44.5, 1.45.3, …
    • cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*range: >=1.43.0,<1.43.9
    • cpe:2.3:a:mediawiki:mediawiki:1.46.0:rc0:*:*:*:*:*:*
  • Wikimedia Foundation/SyntaxHighlight_GeSHillm-create
    Range: <1.46.0, 1.45.4, 1.44.6, 1.43.9

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.