Wikimedia Foundation Mediawiki - TemplateSandbox Extension

• CVE-2026-100240 Critical 9.1 TemplateSandbox does not check read permissions for the page being previewed 0.3%
• CVE-2026-100376 Medium 4.8 TemplateSandbox can be abused for XSS by asking another user to preview a page with a certain sandbox prefix 0.3%