CVE-2026-96877 | Wikimedia MediaWiki up to 3.9.4 Cargo cross site scripting

September 25, 2026 Yanac

A vulnerability described as problematic has been identified in Wikimedia MediaWiki up to 3.9.4. The impacted element is an unknown function of the component Cargo. Such manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2026-96877. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More