Security Advisory

CVE-2026-58520

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-01 17:14:06
Last updated 2026-07-01 17:56:06
Assigner wikimedia-foundation
CVSS score 6.9
State PUBLISHED

Description

URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation Mediawiki - UrlShortener Extension allows Cross-Site Flashing. This issue affects Mediawiki - UrlShortener Extension: from * before 1.43.9, 1.44.6, 1.45.4.