The Wikimedia Foundation Mediawiki - Flow Extension vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting The Wikimedia Foundation Mediawiki - Flow Extension: 1 record(s), with affected versions and fixes.

CVE-2026-100238 Medium · 6.1 CWE-79 Sep 29, 2026

Flow colon-separator and flow-guidedtour-optin-welcome-description messages allow stored XSS

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - Flow Extension allows Stored XSS. This issue affects Mediawiki - Flow Extension: from * before 1.46.1, 1.45.5, 1.43.10.