Wikimedia Foundation Mediawiki - Cargo Extension

• CVE-2026-39837 Medium 6.3 Stored XSS through the dynamic table format in Cargo 0.2%
• CVE-2026-39841 Medium 6.3 Stored XSS through list fields on Cargo's page values and Special:CargoTables 0.2%
• CVE-2026-39840 Medium 5.1 CSS injection in multiple Cargo display formats 0.2%
• CVE-2026-39839 Medium 6.3 Stored XSS through URLs in Cargo's map format 0.2%