CVE-2026-103051

Name of the Vulnerable Software and Affected Versions Mediawiki - CentralNotice extension versions prior to 1.46.1 Mediawiki - CentralNotice extension version 1.45.5 Mediawiki - CentralNotice extension version 1.43.10

Description Improper neutralization of input during web page generation leads to a stored cross-site scripting (XSS) issue. Cross-site scripting is a flaw that allows an attacker to inject malicious scripts into content that is then served to other users.

Recommendations Update Mediawiki - CentralNotice extension to a version newer than 1.46.1. Update Mediawiki - CentralNotice extension to a version newer than 1.45.5. Update Mediawiki - CentralNotice extension to a version newer than 1.43.10.