CVE-2026-55691 | StarCitizenWiki mediawiki-extensions-EmbedVideo up to 4.0.x EmbedHtmlFormatter EmbedHtmlFormatter.php toHtml Class HTML injection

September 15, 2026 Yanac

A vulnerability classified as problematic has been found in StarCitizenWiki mediawiki-extensions-EmbedVideo up to 4.0.x. Affected by this issue is the function EmbedHtmlFormatter::toHtml of the file includes/EmbedService/EmbedHtmlFormatter.php of the component EmbedHtmlFormatter. Performing a manipulation of the argument Class results in HTML injection.

This vulnerability is identified as CVE-2026-55691. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More