Is CVE-2026-103444 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-103444 being exploited in the wild.

How severe is CVE-2026-103444?

Informational severity, published 30 September 2026.

Which products and versions are affected?

Wikimedia Foundation MediaWiki WikiForum master.

Is there a fix for CVE-2026-103444?

A patch was published on 2026-08-26: Patch merged to master branch Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-103444 attacked?

It is attacked over the network.

Am I affected by CVE-2026-103444?

Check whether you run Wikimedia Foundation MediaWiki WikiForum at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-103444: Wikimedia MediaWiki WikiForum stored XSS in system messages

CVE-2026-103444 · Severity: info · Published 2026-09-30

The WikiForum extension for MediaWiki, which provides forum functionality within wiki pages, contains a stored cross-site scripting (XSS) vulnerability in system message handling. An attacker could inject malicious scripts through certain i18n system messages that are inadequately sanitized, allowing attackers to execute arbitrary JavaScript in other users' browsers and potentially compromise accounts or steal data.

Vendors: Wikimedia Foundation.

Quick answers

Is CVE-2026-103444 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-103444 being exploited in the wild.
How severe is CVE-2026-103444?: Informational severity, published 30 September 2026.
Which products and versions are affected?: Wikimedia Foundation MediaWiki WikiForum master.
Is there a fix for CVE-2026-103444?: A patch was published on 2026-08-26: Patch merged to master branch Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-103444 attacked?: It is attacked over the network.
Am I affected by CVE-2026-103444?: Check whether you run Wikimedia Foundation MediaWiki WikiForum at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is a stored XSS in i18n system messages (wikiforum-search-thread, wikiforum-forum, word-separator, parentheses, wikiforum-posted, wikiforum-edited, wikiforum-by) where script-related HTML tags are not properly neutralized. The flaw requires attackers to be able to edit or influence system messages, and affects the MediaWiki WikiForum extension. A fix has been merged to the codebase.

Affected products

Wikimedia Foundation MediaWiki WikiForum master

Timeline

2026-01-09: disclosed
2026-08-26: patched: Patch merged to master branch

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.