VYPR

Mediawiki - Flow Extension

by Wikimedia Foundation

CVEs (1)

  • CVE-2026-100238Sep 29, 2026
    risk 0.00cvss —epss —

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - Flow Extension allows Stored XSS. This issue affects Mediawiki - Flow Extension: from * before 1.46.1, 1.45.5, 1.43.10.