Mediawiki EmbedVideo Extension has stored XSS via malformed src url with $wgEmbedVideoRequireConsent disabled · CVE-2026-57440 · GitHub Advisory Database · GitHub

Mediawiki EmbedVideo Extension has stored XSS via malformed src url with $wgEmbedVideoRequireConsent disabled

High severity GitHub Reviewed Published Jun 24, 2026 in StarCitizenWiki/mediawiki-extensions-EmbedVideo

0 Open 0 Closed

No open alerts for this advisory

Give feedback on Dependabot alerts