{"id":"CVE-2026-103437","published":"2026-09-30T18:18:16.290","lastModified":"2026-09-30T21:17:08.583","description":"Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki ReadingLists extension allows Reflected XSS.\n\nThis issue affects MediaWiki ReadingLists extension: 1.46 and 1.45.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-80"],"vendors":[],"products":[],"references":[{"url":"https://gerrit.wikimedia.org/r/q/I9a724c05b2a55845007512422362e02ed8cf44b0","tags":[]},{"url":"https://phabricator.wikimedia.org/T435863","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}