Description
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki Collection (Book) extension allows XSS Targeting Non-Script Elements.
This issue affects MediaWiki Collection (Book) extension: 1.46, 1.45, and 1.43.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| The Wikimedia Foundation | MediaWiki Collection (Book) extension | 1.46, 1.45, 1.43 | — |
Advisories 1
- WID-SEC-2026-3693 MediaWiki Extensions: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 30, 2026