VYPR

MediaWiki ReadingLists

by Wikimedia Foundation

CVEs (1)

  • CVE-2026-103437LowSep 30, 2026
    risk 0.07cvss —epss —

    Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki ReadingLists extension allows Reflected XSS. This issue affects MediaWiki ReadingLists extension: 1.46 and 1.45.