CVE-2026-0671

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0671", "assignerOrgId": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc", "state": "PUBLISHED", "assignerShortName": "wikimedia-foundation", "dateReserved": "2026-01-07T16:35:05.767Z", "datePublished": "2026-01-08T16:21:24.207Z", "dateUpdated": "2026-01-08T20:13:46.101Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "MediaWiki - UploadWizard extension", "repo": "https://gerrit.wikimedia.org/g/mediawiki/extensions/UploadWizard", "vendor": "Wikimedia Foundation", "versions": [{"status": "affected", "version": "1.45"}, {"status": "affected", "version": "1.44"}, {"status": "affected", "version": "1.43"}, {"status": "affected", "version": "1.39"}]}], "credits": [{"lang": "en", "type": "finder", "value": "A_smart_kitten"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki - UploadWizard extension allows Cross-Site Scripting (XSS).<p>This issue affects MediaWiki - UploadWizard extension: 1.45, 1.44, 1.43, 1.39.</p>"}], "value": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki - UploadWizard extension allows Cross-Site Scripting (XSS).This issue affects MediaWiki - UploadWizard extension: 1.45, 1.44, 1.43, 1.39."}], "impacts": [{"capecId": "CAPEC-63", "descriptions": [{"lang": "en", "value": "CAPEC-63 Cross-Site Scripting (XSS)"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-79", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc", "shortName": "wikimedia-foundation", "dateUpdated": "2026-01-08T16:21:24.207Z"}, "references": [{"url": "https://phabricator.wikimedia.org/T407157"}, {"url": "https://gerrit.wikimedia.org/r/q/I16de2211594ea9a686868ad7789f9879bf981fa1"}], "source": {"discovery": "UNKNOWN"}, "title": "Multiple stored i18n/message-key XSSes in UploadWizard", "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-01-08T20:13:21.226518Z", "id": "CVE-2026-0671", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-08T20:13:46.101Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-0671", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-08T20:13:21.226518Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-08T20:13:40.705Z"}}], "cna": {"title": "Multiple stored i18n/message-key XSSes in UploadWizard", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "A_smart_kitten"}], "impacts": [{"capecId": "CAPEC-63", "descriptions": [{"lang": "en", "value": "CAPEC-63 Cross-Site Scripting (XSS)"}]}], "affected": [{"repo": "https://gerrit.wikimedia.org/g/mediawiki/extensions/UploadWizard", "vendor": "Wikimedia Foundation", "product": "MediaWiki - UploadWizard extension", "versions": [{"status": "affected", "version": "1.45"}, {"status": "affected", "version": "1.44"}, {"status": "affected", "version": "1.43"}, {"status": "affected", "version": "1.39"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://phabricator.wikimedia.org/T407157"}, {"url": "https://gerrit.wikimedia.org/r/q/I16de2211594ea9a686868ad7789f9879bf981fa1"}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki - UploadWizard extension allows Cross-Site Scripting (XSS).This issue affects MediaWiki - UploadWizard extension: 1.45, 1.44, 1.43, 1.39.", "supportingMedia": [{"type": "text/html", "value": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki - UploadWizard extension allows Cross-Site Scripting (XSS).<p>This issue affects MediaWiki - UploadWizard extension: 1.45, 1.44, 1.43, 1.39.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-79", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')"}]}], "providerMetadata": {"orgId": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc", "shortName": "wikimedia-foundation", "dateUpdated": "2026-01-08T16:21:24.207Z"}}}, "cveMetadata": {"cveId": "CVE-2026-0671", "state": "PUBLISHED", "dateUpdated": "2026-01-08T20:13:46.101Z", "dateReserved": "2026-01-07T16:35:05.767Z", "assignerOrgId": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc", "datePublished": "2026-01-08T16:21:24.207Z", "assignerShortName": "wikimedia-foundation"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "MediaWiki - UploadWizard extension", "repo": "https://gerrit.wikimedia.org/g/mediawiki/extensions/UploadWizard", "vendor": "Wikimedia Foundation", "versions": [{"status": "affected", "version": "1.45"}, {"status": "affected", "version": "1.44"}, {"status": "affected", "version": "1.43"}, {"status": "affected", "version": "1.39"}]}], "source": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:wikimedia:mediawiki-extensions-uploadwizard:1.39:*:*:*:*:*:*:*", "matchCriteriaId": "E177CDD3-DB91-4A7B-9C1E-1CE45AC857BC", "vulnerable": true}, {"criteria": "cpe:2.3:a:wikimedia:mediawiki-extensions-uploadwizard:1.43:*:*:*:*:*:*:*", "matchCriteriaId": "360E8939-87FB-40A8-A07E-E3F5CC4A2AFC", "vulnerable": true}, {"criteria": "cpe:2.3:a:wikimedia:mediawiki-extensions-uploadwizard:1.44:*:*:*:*:*:*:*", "matchCriteriaId": "1EBA4166-5A79-4636-8122-71A6DB43FE28", "vulnerable": true}, {"criteria": "cpe:2.3:a:wikimedia:mediawiki-extensions-uploadwizard:1.45:*:*:*:*:*:*:*", "matchCriteriaId": "393B61C5-BB08-4269-840B-C68BFE5F5219", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki - UploadWizard extension allows Cross-Site Scripting (XSS).This issue affects MediaWiki - UploadWizard extension: 1.45, 1.44, 1.43, 1.39."}, {"lang": "es", "value": "Vulnerabilidad de Neutralizaci\u00f3n Incorrecta de la Entrada Durante la Generaci\u00f3n de P\u00e1ginas Web (XSS o \u2019cross-site scripting\u2019) en la extensi\u00f3n Wikimedia Foundation MediaWiki - UploadWizard permite cross-site scripting (XSS). Este problema afecta a la extensi\u00f3n MediaWiki - UploadWizard: 1.45, 1.44, 1.43, 1.39."}], "id": "CVE-2026-0671", "lastModified": "2026-10-26T21:10:00.170", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0671", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-01-08T20:13:21.226518Z", "version": "2.0.3"}}]}, "published": "2026-01-08T17:15:50.240", "references": [{"source": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc", "tags": ["Patch"], "url": "https://gerrit.wikimedia.org/r/q/I16de2211594ea9a686868ad7789f9879bf981fa1"}, {"source": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc", "tags": ["Exploit", "Issue Tracking", "Vendor Advisory"], "url": "https://phabricator.wikimedia.org/T407157"}], "sourceIdentifier": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T07:36:27.084136+00:00", "value": {"mitigation_remediation": ["Update the MediaWiki UploadWizard extension to the latest fixed version released by the Wikimedia Foundation.", "After the update, clear all page and user caches so that no stale unsanitized i18n/message\u2011key data remains in the output.", "Remove or escape any existing stored i18n/message\u2011key entries that could contain malicious payloads before they are displayed to users."], "summary": {"action": "Apply patch", "impact": "Stored Cross\u2011Site Scripting"}, "threat_synthesis": {"affected_systems": "The MediaWiki UploadWizard extension is affected, specifically versions 1.39, 1.43, 1.44, and 1.45 from the Wikimedia Foundation. An instance running any of these versions that accepts user\u2011supplied i18n/message\u2011key data is vulnerable.", "description_and_impact": "The vulnerability allows an attacker to insert malicious JavaScript into stored i18n/message\u2011key data used by the UploadWizard extension. When a user views a page that renders these keys, the injected script executes in the user\u2019s browser. This can lead to session hijacking, defacement, or the delivery of malware in the context of authenticated users. The weakness is a classic stored XSS flaw documented as CWE\u201179.", "risk_and_exploitability": "The CVSS score of 6.1 indicates a moderate impact, while the EPSS score of less than 1% shows a very low current exploitation probability. The vulnerability is not listed in the CISA KEV catalog. The attack vector is likely the web interface of the UploadWizard component, where an attacker can create or edit i18n/message\u2011key data that is subsequently rendered for other users."}}}}, "created": "2026-01-09T13:24:32.911637+00:00", "updated": "2026-04-18T07:45:24.977742+00:00", "vendors": ["mediawiki", "mediawiki$PRODUCT$mediawiki", "wikimedia", "wikimedia$PRODUCT$mediawiki-uploadwizard_extension"]}