CVE-2026-100243

Name of the Vulnerable Software and Affected Versions Mediawiki - WikiSEO Extension versions prior to 1.46.1 Mediawiki - WikiSEO Extension version 1.45.5 Mediawiki - WikiSEO Extension version 1.43.10

Description Improper neutralization of input during web page generation allows for Stored Cross-site Scripting (XSS), a flaw where malicious scripts are permanently stored on the target server. The issue occurs within the author and image properties on the 'action=info' endpoint.

Recommendations Update Mediawiki - WikiSEO Extension to version 1.46.1 or later. Update Mediawiki - WikiSEO Extension to a version newer than 1.45.5. Update Mediawiki - WikiSEO Extension to a version newer than 1.43.10.