Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Bucket is a MediaWiki extension to store and retrieve structured data on articles. Prior to 2.1.1, a stored XSS can be inserted into any Bucket table field that has a PAGE type, which will execute whenever a user views that table's corresponding Bucket namespace page. This vulnerability is fixed in 2.1.1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-30917 Stored XSS Vulnerability in MediaWiki Bucket Extension Before 2.1.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-30917
Post summary
A Stored XSS vulnerability in MediaWiki Bucket Extension (versions prior to 2.1.1) is identified, but no PoC, exploit, patch, or active exploitation details are provided.
🚨*CVE* CVE-2026-30917 Bucket is a MediaWiki extension to store and retrieve structured data on articles. Prior to 2.1.1, a stored XSS can be inserted into any Bucket table field that has a… https://www.cve.org/CVERecord?id=CVE-2026-30917 ----- Traducción: CVE-2026-30917 Buc… http://infoflow.cloud`
Post summary
The post announces the CVE-2026-30917 vulnerability, detailing it as a stored XSS in MediaWiki’s Bucket extension before version 2.1.1, without mentioning PoCs, exploitation, or fixes.
CVE-2026-30917 Bucket is a MediaWiki extension to store and retrieve structured data on articles. Prior to 2.1.1, a stored XSS can be inserted into any Bucket table field that has a… https://www.cve.org/CVERecord?id=CVE-2026-30917
Post summary
The text announces a stored XSS vulnerability in MediaWiki’s Bucket extension (CVE‑2026‑30917) affecting pre‑2.1.1 releases, with a link to the CVE record. No PoC, exploit, or patch details are provided.