Mediawiki · Templatesandbox Extension · CVE-2026-100376
**Name of the Vulnerable Software and Affected Versions**
Mediawiki - TemplateSandbox Extension versions prior to 1.46.1
Mediawiki - TemplateSandbox Extension version 1.45.5
Mediawiki - TemplateSandbox Extension version 1.43.10
**Description**
Improper neutralization of input during web page generation allows for Cross-Site Scripting (XSS), a condition where malicious scripts are injected into trusted websites.
**Recommendations**
Update Mediawiki - TemplateSandbox Extension to a version newer than 1.46.1.
Update Mediawiki - TemplateSandbox Extension to a version newer than 1.45.5.
Update Mediawiki - TemplateSandbox Extension to a version newer than 1.43.10.