Question 1

What is CVE-2026-100376 — CVE-2026-100376?

Accepted Answer

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Cross-Site Scripting (XSS). This issue affects Mediawiki - TemplateSandbox Extension: from * before 1.46.1, 1.45.5, 1.43.10.

Question 2

What is the authoritative source for CVE-2026-100376?

Accepted Answer

CVE-2026-100376 (CVE-2026-100376) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

EPSS	0.29% probability of exploitation · percentile 20.1% · 2026-10-05T12:00:23Z
Last modified	2026-09-28

CVE-2026-100376CVE-2026-100376

Description

Scoring