CVE-2026-103045
Description
A flaw was found in the MediaWiki Refreshed skin. The application fails to properly sanitize user-supplied input prior to rendering web pages, resulting in a stored cross-site scripting (XSS) vulnerability. A remote attacker could exploit this flaw by injecting malicious scripts into persistent content. When another user views the affected page, the script executes within the context of their browser session, potentially leading to session hijacking, unauthorized actions, or information disclosure.
Statement
Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
