Wikimedia Foundation timeline

• CVE-2026-8857 None 0.0 Full RCE using EasyTimeline Extension 2.1%
• CVE-2026-58038 None 0.0 Stored XSS through javascript URLs in SVGs generated by EasyTimeline 0.3%