Executive brief
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in the Mediawiki - Cargo extension allows Stored XSS.
This issue affects Mediawiki - Cargo extension: through 3.9.4.
Junglewise Threat Intelligence
CVE-2026-96874: Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in the Mediawiki - Cargo extension allows
CVE-2026-96874 · Severity: info · Published 2026-09-25