A vulnerability described as problematic has been identified in Wikimedia Cargo Extension up to 3.8.6 on Mediawiki. This affects an unknown part. The manipulation results in basic cross site scripting.
This vulnerability is reported as CVE-2026-39839. The attack can be launched remotely. No exploit exists.
Upgrading the affected component is recommended.
