CVE-2026-103585 | Wikimedia Foundation MediaWiki 1.43/1.45/1.46 MediaSearch cross site scripting

September 30, 2026 Yanac

A vulnerability identified as problematic has been detected in Wikimedia Foundation MediaWiki 1.43/1.45/1.46. The impacted element is an unknown function of the component MediaSearch. The manipulation leads to cross site scripting.

This vulnerability is listed as CVE-2026-103585. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More