Vulnerability Database

324,311

Total vulnerabilities in the database

CVE-2026-22710

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Wikibase Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Wikibase Extension: 1.45, 1.44, 1.43, 1.39.

  • Published: Jan 9, 2026
  • Updated: Feb 13, 2026
  • CVE: CVE-2026-22710
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.4
  • AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
wikimedia / wikibase 1.39 1.39.x
wikimedia / wikibase 1.43 1.43.x
wikimedia / wikibase 1.44 1.44.x
wikimedia / wikibase 1.45 1.45.x