CVE-2026-52854
1 advisory.
Packagist/mediawiki/maps CVE-2026-52854: high 8.6, EPSS 0.58%
mediawiki/maps has stored XSS through the overlays parameter in the display_map parser function
Action: Upgrade mediawiki/maps to 12.1.3 or later.
composer require mediawiki/maps:12.1.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 12.1.3 | - |
Fixed versions
| 12.1.3 |
Sources
- osv: GHSA-4h7g-5542-v3fc
- https://github.com/ProfessionalWiki/Maps/security/advisories/GHSA-4h7g-5542-v3fc
- https://github.com/ProfessionalWiki/Maps
CVE-2026-52854 · published · modified · JSON