CVE-2026-103437
— UNSCOREDPublished 2026-09-30 · Updated 2026-09-30
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki ReadingLists extension allows Reflected XSS. This issue affects MediaWiki ReadingLists extension: 1.46 and 1.45.
Weaknesses
CWE-80
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2023-54409PoC
- LOWCVE-2026-102279PoC
- UNSCOREDCVE-2026-103438
- UNSCOREDCVE-2026-103439
- UNSCOREDCVE-2026-103443
- UNSCOREDCVE-2026-103444
- UNSCOREDCVE-2026-103445
- UNSCOREDCVE-2026-103584
Related by shared AI tags and CWE weakness class. Browse the full archive.