<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: the-wikimedia-foundation-mediawiki-cargo-extension</title><description>Every new CVE for the-wikimedia-foundation-mediawiki-cargo-extension.</description><link>https://agentprime.io/</link><item><title>CVE-2026-103049: XSS in Cargo&apos;s Special:CargoQuery page due to unsanitized table headers</title><link>https://agentprime.io/advisories/CVE-2026-103049/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-103049/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 29 Sep 2026 23:08:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-96878: Cargo Exhibit field alias allows stored XSS</title><link>https://agentprime.io/advisories/CVE-2026-96878/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-96878/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 25 Sep 2026 19:41:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-96877: Reflected XSS through Cargo Drilldown full-text search</title><link>https://agentprime.io/advisories/CVE-2026-96877/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-96877/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 25 Sep 2026 19:39:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-96876: Anonymous reflected XSS in CargoExport invalid-alias errors</title><link>https://agentprime.io/advisories/CVE-2026-96876/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-96876/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 25 Sep 2026 19:33:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-96875: Reflected XSS in Cargo Drilldown hierarchy filters</title><link>https://agentprime.io/advisories/CVE-2026-96875/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-96875/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 25 Sep 2026 19:29:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-96874: Stored XSS in Cargo Drilldown tab names</title><link>https://agentprime.io/advisories/CVE-2026-96874/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-96874/</guid><description>CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 25 Sep 2026 14:59:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-14363: Cargo Extension: SQLi in Special:Drilldown</title><link>https://agentprime.io/advisories/CVE-2026-14363/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-14363/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Jul 2026 19:22:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-58521: SQLi in Cargo extension via year range filter</title><link>https://agentprime.io/advisories/CVE-2026-58521/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-58521/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Jul 2026 17:30:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-58519: Stored XSS through Cargo&apos;s map format</title><link>https://agentprime.io/advisories/CVE-2026-58519/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-58519/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Jul 2026 03:59:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-62655: SQL injection in Cargo via Special:CargoExport</title><link>https://agentprime.io/advisories/CVE-2025-62655/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-62655/</guid><description>CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 17 Oct 2025 22:46:28 GMT</pubDate><category>CVE</category></item></channel></rss>