CVE-2026-103047

Name of the Vulnerable Software and Affected Versions Mediawiki - CentralAuth extension versions prior to 1.46.1 Mediawiki - CentralAuth extension version 1.45.5 Mediawiki - CentralAuth extension version 1.43.10

Description Improper neutralization of input during web page generation leads to a Stored Cross-Site Scripting (XSS) issue. Stored XSS occurs when an application receives data from a user and includes that data within its later HTTP responses in an unsafe way, allowing a malicious script to be permanently stored on the server.

Recommendations Update Mediawiki - CentralAuth extension to a version newer than 1.46.1. Update Mediawiki - CentralAuth extension to a version newer than 1.45.5. Update Mediawiki - CentralAuth extension to a version newer than 1.43.10.