A vulnerability was found in Wikimedia Score Extension up to 1.43.6/1.44.3/1.45.1 on Mediawiki. It has been declared as problematic. This affects an unknown function. Such manipulation leads to cross site scripting.
This vulnerability is uniquely identified as CVE-2026-39936. The attack can be launched remotely. No exploit exists.
It is recommended to upgrade the affected component.