Wikimedia Foundation MediaWiki - CampaignEvents extension

• CVE-2026-0817 Medium 5.3 CampaignEvents API missing authorization exposes meeting and chat URLs 0.3%
• CVE-2025-53490 Medium 5.6 Multiple XSS in CampaignEvents 0.2%