CVE-2026-103584 | Wikimedia Foundation MediaWiki 1.43/1.45/1.46 CommonsMetadata cross site scripting

September 30, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Wikimedia Foundation MediaWiki 1.43/1.45/1.46. The affected element is an unknown function of the component CommonsMetadata. Executing a manipulation can lead to cross site scripting.

This vulnerability is tracked as CVE-2026-103584. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More