CVE-2026-103050

Name of the Vulnerable Software and Affected Versions Mediawiki - MassMessage extension versions prior to 1.46.1 Mediawiki - MassMessage extension version 1.45.5 Mediawiki - MassMessage extension version 1.43.10

Description Improper neutralization of input during web page generation leads to a Stored Cross-Site Scripting (XSS) issue. Stored XSS occurs when an application receives data from a user and includes that data within its later HTTP responses in an unsafe way, allowing a malicious script to be permanently stored on the server.

Recommendations Update Mediawiki - MassMessage extension to a version later than 1.46.1. Update Mediawiki - MassMessage extension to a version later than 1.45.5. Update Mediawiki - MassMessage extension to a version later than 1.43.10.