XSS in Wikimedia Foundation Scribunto

CVE-2026-34089

Vulnerability in Wikimedia Foundation Scribunto. This issue affects Scribunto: from 1.45.0 before 1.45.2.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.001 (16.7th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References