CVE-2026-100381 | Wikimedia Upload Wizard Extension up to 1.46.0/1.45.4/1.43.9 cross site scripting

September 25, 2026 Yanac

A vulnerability described as problematic has been identified in Wikimedia Upload Wizard Extension up to 1.46.0/1.45.4/1.43.9. This affects an unknown part of the component Upload. The manipulation results in cross site scripting.

This vulnerability was named CVE-2026-100381. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More