Threats tagged 'ghsa-h46v-wcxp-q8jp'

An open redirect vulnerability (CVE-2026-103048) exists in the Mediawiki Collection extension before versions 1.46.1, 1.45.5, and 1.43.10. This flaw allows attackers to redirect users to untrusted sites, which could be used to facilitate phishing or spoofing attacks by faking the source of data. The vulnerability has a medium severity with a CVSS score of 6.1.