CVE-2026-96873: The Wikimedia Foundation Mediawiki - Cirrussearch Extension

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - CirrusSearch extension allows Reflected XSS. This issue affects Mediawiki - CirrusSearch extension through 1.46.0.

Affected products

• The Wikimedia Foundation Mediawiki - Cirrussearch Extension: up to and including 1.46.0

Published 2026-09-24. Last modified 2026-09-24.