Threats tagged 'ghsa-w42g-3487-f7gc'

CVE-2026-102796 is a high-severity SQL Injection vulnerability in the Wikimedia Foundation's Mediawiki UserPageViewTracker Extension. It affects multiple versions prior to 1.46.1, 1.45.5, and 1.43.10. The flaw allows an attacker to inject malicious SQL commands due to improper neutralization of special elements in SQL queries. This vulnerability can lead to unauthorized disclosure of data but does not impact integrity or availability according to the CVSS vector.