Skip to content
OpenAdvisories
Low · 2.3 CVE-2026-22714 EUVD-2026-1820GHSA-g8v8-86v5-jrqm

i18n XSS, DoS and config SQLI in Monaco

Published Jan 8, 2026 · Updated Jan 9, 2026 · Assigned by wikimedia-foundation

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Monaco Skin allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Monaco Skin: 1.45, 1.44, 1.43, 1.39.

Affected products

VendorProductAffectedFixed
The Wikimedia Foundation Mediawiki - Monaco Skin 1.45, 1.44, 1.43, 1.39 —

Advisories 1

References