PT-2026-54647

CVE-2026-14363

Published

2026-07-01

Updated

2026-10-25

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mediawiki - Cargo Extension versions prior to 1.43.9 Mediawiki - Cargo Extension versions prior to 1.44.6 Mediawiki - Cargo Extension versions prior to 1.45.4

Description Improper neutralization of special elements used in an SQL command leads to a SQL injection, which occurs when an attacker can interfere with the queries that an application makes to its database.

Recommendations Update Mediawiki - Cargo Extension to version 1.43.9 or later. Update Mediawiki - Cargo Extension to version 1.44.6 or later. Update Mediawiki - Cargo Extension to version 1.45.4 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Gicodewarrior

Yaron_Koren

Vendors

Affected products

Weakness enumeration

CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')

Related identifiers