Advisories · Technology

The Wikimedia Foundation MediaWiki Collection (Book) extension.

Every CVE that names The Wikimedia Foundation MediaWiki Collection (Book) extension among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-103443 CVE record

CVSS 1.1 Low

API permits session-seeded javascript URL XSS
- The Wikimedia Foundation MediaWiki Collection (Book) extension
- Cross-site scripting (XSS)
Not analysed yet 30 Sept 2026