Question 1

What is CVE-2026-103584 — CVE-2026-103584?

Accepted Answer

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki CommonsMetadata extension allows Cross-Site Scripting (XSS). This issue affects MediaWiki CommonsMetadata extension: 1.46, 1.45, and 1.43.

Question 2

What is the authoritative source for CVE-2026-103584?

Accepted Answer

CVE-2026-103584 (CVE-2026-103584) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

EPSS	0.29% probability of exploitation · percentile 19.1% · 2026-10-05T12:00:23Z
Last modified	2026-10-01

CVE-2026-103584CVE-2026-103584

Description

Scoring