https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-02T08:50:27.353979+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/bdu:2026-14687 bdu:2026-14687 2026-10-02T08:50:27.355371+00:00 bdu:2026-14687 https://db.gcve.eu/vuln/cve-2026-58032 CVE-2026-58032 — mw.Api.getErrorMessage() may return injected HTML if used without errorformat=html 2026-10-02T08:50:27.355412+00:00

Affected: Wikimedia Foundation MediaWiki

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki.

This vulnerability is associated with program files resources/src/mediawiki.Api/index.Js.

This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.