CVE-2026-30917

Published March 10th, 2026

View on NVD ↗

CVSS v3

N/A

CVSS v2

N/A

Affected

PROJECT

Description

Bucket is a MediaWiki extension to store and retrieve structured data on articles. Prior to 2.1.1, a stored XSS can be inserted into any Bucket table field that has a PAGE type, which will execute whenever a user views that table's corresponding Bucket namespace page. This vulnerability is fixed in 2.1.1.

weirdgloop/mediawiki-extensions-Bucket

Bucket is a MediaWiki extension that lets you store structured data on articles, which can be queried by other articles and APIs.

GitHub