{"id":"CVE-2026-103585","published":"2026-09-30T23:16:57.890","lastModified":"2026-10-01T16:17:36.953","description":"Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki MediaSearch extension allows Cross-Site Scripting (XSS).\n\nThis issue affects MediaWiki MediaSearch extension: 1.46, 1.45, and 1.43.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-80"],"vendors":[],"products":[],"references":[{"url":"https://gerrit.wikimedia.org/r/q/I79e8200289bd120c3c971ba830776eaae779bb99","tags":[]},{"url":"https://phabricator.wikimedia.org/T435999","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}