CVE-2026-100383: Stored i18n XSS in WikiLambda's VisualEditor integration
Published Sep 25, 2026
·Updated
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - WikiLambda Extension allows Cross-Site Scripting (XSS).
This issue affects Mediawiki - WikiLambda Extension: 1.47.0-alpha. The issue has been remediated on the master branch.
Affected Software
1 affected component
Wikimedia Foundation MediaWiki - WikiLambda Extension=1.47.0-alpha
Event History
Sep 25, 2026
CVE Published
via MITRE·09:05 PM
Data Sourced
via MITRE·09:05 PM
DescriptionWeakness
Data Sourced
via NVD·10:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are confirmed to be affected?
The affected version identified in the available data is MediaWiki WikiLambda Extension 1.47.0-alpha.
2
Is a fix available?
The issue has been remediated on the WikiLambda extension's master branch.