TI-2026-18240 CVE-2026-22713 · GHSA-972g-439m-qvrvStored XSS through edit summaries in GrowthExperimentsPriority MEDIUM 45Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Cross-Site Scripting (XSS).This issue a…CVSS 4.0LOW 2.3· Network · No auth · User interaction · EPSS 0.00192 · Published 2026-01-09 · No fix listed CWE-79