CVE-2026-58037 — VulnIntel

CVE-2026-58037

NONE

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Language/Language.Php, includes/Logging/BlockLogFormatter.Php, includes/Logging/LogFormatter.Php, includes/Logging/PatrolLogFormatter.Php, includes/Logging/RenameuserLogFormatter.Php, includes/Logging/TagLogFormatter.Php, includes/Specials/SpecialVersion.Php. This issue affects MediaWiki: fro

StatusAnalyzed

설명

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki.

This vulnerability is associated with program files includes/Language/Language.Php, includes/Logging/BlockLogFormatter.Php, includes/Logging/LogFormatter.Php, includes/Logging/PatrolLogFormatter.Php, includes/Logging/RenameuserLogFormatter.Php, includes/Logging/TagLogFormatter.Php, includes/Specials/SpecialVersion.Php.

This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

Score Summary

CVSS Score: 0.0
Version: 4.0
VPI: 0
Why this VPI (explainable, experimental)
VPI breakdown
Impact 0.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 0.00
VPI formula vpi-v1
EPSS: 0.3%
(상위 18.8%)
Attack Vector: Network
Low Complexity
Low Privileges

Details

Published: 07/01/2026(19 days ago)
Modified: 07/09/2026

Score Comparison by Source

Source	CVSS Version	Base Score	Severity	Vector String	Assessment Date
NVDNIST	3.1	6.1	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	07/10/2026
NVDNIST	4.0	0.0

CWE Weakness Classification

CWE-79
NVD
Secondary

References (1)

NVD
https://phabricator.wikimedia.org/T422995

Affected Products (1)

Impact	0.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	0.00