CVE-2026-100376 | Wikimedia MediaWiki up to 1.46.0/1.45.4/1.43.9 TemplateSandbox Extension cross site scripting

September 25, 2026 Yanac

A vulnerability labeled as problematic has been found in Wikimedia MediaWiki up to 1.46.0/1.45.4/1.43.9. Affected by this vulnerability is an unknown functionality of the component TemplateSandbox Extension. Executing a manipulation can lead to cross site scripting.

This vulnerability is handled as CVE-2026-100376. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More