Threats tagged 'ghsa-hg46-8gx2-qp79'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.1	EPSS 0.2%	CVE-2026-100238Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Medium6.1EPSS 0.2%2026-09-29GCVE DatabaseCVE-2026-100238 A stored cross-site scripting (XSS) vulnerability exists in the Wikimedia Foundation Mediawiki Flow Extension due to improper input neutralization during web page generation. This allows malicious scripts to be stored and executed in users' browsers. The vulnerability affects versions prior to 1.46.1, 1.45.5, and 1.43.10 of the Flow Extension. No CVSS score or detailed vendor advisory is available. EPSS 0.2%Report on CVE-2026-100238 Vulnerability CWE-79 #ghsa-hg46-8gx2-qp79	GCVE Database	2026-09-29

Page 1 of 1