Unrated severityNVD Advisory· Published Jul 1, 2026· Updated Jul 1, 2026
SQLi in Cargo extension via year range filter
CVE-2026-58521
Description
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows SQL Injection.
This issue affects Mediawiki - Cargo Extension: from * before 1.43.9,1.44.6,1.45.4.
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.