p PatchFirst

CVE-2026-58030

CVE-2026-58030 · SyntaxHighlight stored XSS via unsanitized 'linelinks' attribute

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation SyntaxHighlight_GeSHi. This vulnerability is associated with program files includes/SyntaxHighlight.Php. This issue affects SyntaxHighlight_GeSHi: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

CVSS 5.3 · Medium · EPSS 0.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • syntaxhighlight_geshi

    Versions
    • ≥ *, < 1.46.0, 1.45.4, 1.44.6, 1.43.9: Affected (semver)

    Update to 1.46.0, 1.45.4, 1.44.6, 1.43.9

  • mediawiki Debian:12

    Versions
    • 1:1.39.10-1
    • 1:1.39.10-1~deb12u1
    • 1:1.39.12-1~deb12u1
    • 1:1.39.13-1~deb12u1
    • 1:1.39.17-1+deb12u2
    • 1:1.39.17-1~deb12u1
    • 1:1.39.2-1
    • 1:1.39.4-1
    • 1:1.39.4-1~deb12u1
    • 1:1.39.4-2
    • 1:1.39.5-1
    • 1:1.39.5-1~deb12u1
    • 1:1.39.6-1
    • 1:1.39.7-1
    • 1:1.39.7-1~deb12u1
    • 1:1.39.8-1
    • 1:1.43.0+dfsg-1
    • 1:1.43.0+dfsg-2
    • 1:1.43.1+dfsg-1
    • 1:1.43.1+dfsg-2
    • 1:1.43.3+dfsg-1
    • 1:1.43.5+dfsg-1
    • 1:1.43.6+dfsg-1
    • 1:1.43.6+dfsg-1~deb13u1
    • 1:1.43.6+dfsg-2
    • 1:1.43.8+dfsg-1
    • 1:1.43.8+dfsg-1~deb13u1
    • 1:1.43.8+dfsg-2
    • 1:1.43.9+dfsg-1
    • 1:1.43.9+dfsg-1~deb13u1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mediawiki Debian:13

    Versions
    • 1:1.43.3+dfsg-1
    • 1:1.43.5+dfsg-1
    • 1:1.43.6+dfsg-1
    • 1:1.43.6+dfsg-1~deb13u1
    • 1:1.43.6+dfsg-2
    • 1:1.43.8+dfsg-1
    • 1:1.43.8+dfsg-1~deb13u1
    • 1:1.43.8+dfsg-2
    Affected ranges
    • ECOSYSTEM: < 1:1.43.9+dfsg-1~deb13u1

    Update to 1:1.43.9+dfsg-1~deb13u1

  • mediawiki Debian:14

    Versions
    • 1:1.43.3+dfsg-1
    • 1:1.43.5+dfsg-1
    • 1:1.43.6+dfsg-1
    • 1:1.43.6+dfsg-1~deb13u1
    • 1:1.43.6+dfsg-2
    • 1:1.43.8+dfsg-1
    • 1:1.43.8+dfsg-1~deb13u1
    • 1:1.43.8+dfsg-2
    • 1:1.43.9+dfsg-1~deb13u1
    Affected ranges
    • ECOSYSTEM: < 1:1.43.9+dfsg-1

    Update to 1:1.43.9+dfsg-1

  • mediawiki Ubuntu:18.04:LTS

    Versions
    • 1:1.27.3-1
    • 1:1.27.4-1
    • 1:1.27.4-2
    • 1:1.27.4-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mediawiki Ubuntu:Pro:20.04:LTS

    Versions
    • 1:1.31.2-1ubuntu1
    • 1:1.31.5-1
    • 1:1.31.5-1ubuntu1
    • 1:1.31.5-2
    • 1:1.31.5-3
    • 1:1.31.5-3ubuntu1
    • 1:1.31.6-1
    • 1:1.31.7-1
    • 1:1.31.7-1ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mediawiki Ubuntu:Pro:22.04:LTS

    Versions
    • 1:1.35.3-1
    • 1:1.35.4-1
    • 1:1.35.5-1
    • 1:1.35.5-1ubuntu1
    • 1:1.35.5-1ubuntu2
    • 1:1.35.5-1ubuntu3
    • 1:1.35.6-1
    • 1:1.35.6-1ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mediawiki Ubuntu:Pro:24.04:LTS

    Versions
    • 1:1.39.4-2
    • 1:1.39.5-1
    • 1:1.39.6-1
    • 1:1.39.7-1
    • 1:1.39.7-1ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mediawiki Ubuntu:25.10

    Versions
    • 1:1.43.1+dfsg-1
    • 1:1.43.1+dfsg-2
    • 1:1.43.3+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mediawiki Ubuntu:26.10

    Versions
    • 1:1.43.8+dfsg-2
    • 1:1.43.9+dfsg-1
    • 1:1.43.9+dfsg-1ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mediawiki Ubuntu:26.04:LTS

    Versions
    • 1:1.43.3+dfsg-1
    • 1:1.43.5+dfsg-1
    • 1:1.43.6+dfsg-2
    • 1:1.43.8+dfsg-1
    • 1:1.43.8+dfsg-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →