The vulnerability identified as CVE-2026-100243 is a stored Cross-site Scripting (XSS) flaw in the Wikimedia Foundation Mediawiki WikiSEO Extension. It arises from improper neutralization of input during web page generation, which allows attackers to inject malicious scripts that are stored and later executed in the context of users visiting affected pages. The affected versions include all versions before 1.46.1, 1.45.5, and 1.43.10. No further technical details or exploitation methods are provided in the source data.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of users' browsers when they view affected pages. This can lead to session hijacking, defacement, or redirection to malicious sites. However, no known exploits in the wild have been reported, and no detailed impact analysis is available from the vendor or authoritative sources.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or vendor advisory is provided, users should monitor official Wikimedia Foundation channels for updates. Until a fix is available, consider restricting or sanitizing user input related to the WikiSEO Extension if possible.