Stored XSS in MediaWiki Cargo Extension (CVE-2026-39837) and Patch

This content was auto-fetched from phabricator.wikimedia.org, cleaned by our LLM pipeline, and translated to English. View original.