GHSA-v276-8895-8m7m

Опубликовано: 01 окт. 2026

Источник: github

Github: Не прошло ревью

CVSS4: 1.1

Описание

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki CommonsMetadata extension allows Cross-Site Scripting (XSS).

This issue affects MediaWiki CommonsMetadata extension: 1.46, 1.45, and 1.43.

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki CommonsMetadata extension allows Cross-Site Scripting (XSS).

This issue affects MediaWiki CommonsMetadata extension: 1.46, 1.45, and 1.43.

Ссылки

EPSS

Процентиль: 19%

0.00285

Низкий

1.1 Low

CVSS4

CVE ID

CVE-2026-103584

Дефекты

CWE-80

Связанные уязвимости

CVE-2026-103584

nvd

3 дня назад

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki CommonsMetadata extension allows Cross-Site Scripting (XSS). This issue affects MediaWiki CommonsMetadata extension: 1.46, 1.45, and 1.43.

EPSS

Процентиль: 19%

0.00285

Низкий

1.1 Low

CVSS4

CVE ID

CVE-2026-103584

Дефекты

CWE-80