Vulnerabilities
Report: CVE-2026-39841 - Stored XSS through list fields on Cargo's page values and Special:CargoTables - Complete Guide
CVE ID :CVE-2026-39841 Published : April 7, 2026, 8:16 p.m. | 1 hour, 36 minutes ago Description :Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS.This issue affects Mediawiki - Cargo Extension: before 3.8.7. Severity: 6.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...