CVE-2026-22711

Publication date

2026-04-07 18:39:37

Family

wikimedia-foundation

State

PUBLISHED

Description

Improper neutralization of alternate XSS syntax vulnerability in The Wikimedia Foundation Mediawiki - Wikilove Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Wikilove Extension: 1.43.7, 1.44.4, 1.45.2.