TI-2026-00463 CVE-2026-0670 · GHSA-m5v6-566h-wgcgStored XSS through a system message and a user-provided parameter in ProofreadPagePriority LOW 27Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki - ProofreadPage Extension allows Cross-Site Scripting (XSS).This issue affects M…CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00193 · Published 2026-01-07 · No fix listed CWE-79