CVE-2026-96878 | Wikimedia Foundation MediaWiki up to 3.9.4 Cargo cross site scripting

September 25, 2026 Yanac

A vulnerability classified as problematic has been found in Wikimedia Foundation MediaWiki up to 3.9.4. This affects an unknown function of the component Cargo. Performing a manipulation results in cross site scripting.

This vulnerability is identified as CVE-2026-96878. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More