← All advisories

Medium severityNVD Advisory· Published Sep 25, 2026· Updated Sep 25, 2026

CVE-2026-96875

CVE-2026-96875

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cargo extension allows Stored XSS.

This issue affects Mediawiki - Cargo extension: through 3.9.4.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

MediaWiki/Cargo Extensionllm-fuzzy
Range: <=3.9.4

Patches

Vulnerability mechanics

References

1

phabricator.wikimedia.org/T435206nvd

News mentions

0

No linked articles in our index yet.