Executive brief
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cargo extension allows Reflected XSS.
This issue affects Mediawiki - Cargo extension: through 3.9.4.
Junglewise Threat Intelligence
CVE-2026-96876: Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cargo extension allows Ref
CVE-2026-96876 · Severity: info · Published 2026-09-25