CVE-2026-100237

Name of the Vulnerable Software and Affected Versions Mediawiki - Thanks Extension versions prior to 1.43.10 Mediawiki - Thanks Extension versions prior to 1.45.5 Mediawiki - Thanks Extension versions prior to 1.46.1

Description Improper neutralization of input during web page generation allows Stored Cross-Site Scripting (XSS), a condition where malicious scripts are permanently stored on the target server and later executed in the browser of a user visiting the affected page.

Recommendations Update Mediawiki - Thanks Extension to version 1.43.10 or later. Update Mediawiki - Thanks Extension to version 1.45.5 or later. Update Mediawiki - Thanks Extension to version 1.46.1 or later.