CVE-2026-103444: The Wikimedia Foundation Mediawiki Wikiforum Extension

Low severity, CVSS 1.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki WikiForum extension allows Stored XSS. This issue affects MediaWiki WikiForum extension: master.

Affected products

• The Wikimedia Foundation Mediawiki Wikiforum Extension

Published 2026-09-30. Last modified 2026-09-30.