CVE-2026-100380 | Wikimedia MediaWiki up to 1.46.0/1.45.4/1.43.9 Wikibase cross site scripting

September 25, 2026 Yanac

A vulnerability identified as problematic has been detected in Wikimedia MediaWiki up to 1.46.0/1.45.4/1.43.9. Affected is an unknown function of the component Wikibase. Performing a manipulation results in cross site scripting.

This vulnerability is known as CVE-2026-100380. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More