Mediawiki · Urlshortener Extension · CVE-2026-58520
**Name of the Vulnerable Software and Affected Versions**
Mediawiki - UrlShortener Extension versions prior to 1.43.9
Mediawiki - UrlShortener Extension version 1.44.6
Mediawiki - UrlShortener Extension version 1.45.4
**Description**
An open redirect issue exists which allows URL redirection to untrusted sites, potentially enabling Cross-Site Flashing.
**Recommendations**
Update Mediawiki - UrlShortener Extension to a version newer than 1.43.9.
Update Mediawiki - UrlShortener Extension to a version newer than 1.44.6.
Update Mediawiki - UrlShortener Extension to a version newer than 1.45.4.