Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS.This issue affects Mediawiki - Cargo Extension: before 3.8.7.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-39841 Stored Cross-Site Scripting in Wikimedia Foundation Mediawiki Cargo Extension Before 3.8.7 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-39841
Post summary
The text announces CVE-2026-39841, a stored XSS flaw in the MediaWiki Cargo Extension before version 3.8.7, and provides a link to a vulnerability details page.
CVE-2026-39841 Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS.This… https://www.cve.org/CVERecord?id=CVE-2026-39841
Post summary
The text announces a basic XSS vulnerability in MediaWiki's Cargo Extension, providing technical details but no PoC, exploit code, patch info, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mediawiki | cargo | - | - | - |