Wikimedia Foundation MediaWiki - ProofreadPage Extension

• CVE-2026-39838 Medium 6.9 ProofreadPage improperly sanitizes multiline styles using Sanitizer::checkCSS 0.4%
• CVE-2026-0670 Medium 6.1 Stored XSS through a system message and a user-provided parameter in ProofreadPage 0.2%