PT-2026-31011

CVE-2026-39837

·

Published

2026-04-07

·

Updated

2026-04-08

Description by

CVSS 4.0
6.3
Medium
MetricsAV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N
Name of the Vulnerable Software and Affected Versions MediaWiki - Cargo Extension versions prior to 3.8.7
Description A Stored Cross-Site Scripting (XSS) issue exists in the MediaWiki - Cargo Extension due to improper neutralization of script-related HTML tags. This allows for the injection of malicious scripts into web pages.
Recommendations Update MediaWiki - Cargo Extension to version 3.8.7 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Related identifiers
CVE-2026-39837
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com