CVE-2026-58521 – SQLi in Cargo extension via year range filter

CVE ID :CVE-2026-58521

Published : July 1, 2026, 5:30 p.m. | 15 minutes ago

Description :Improper neutralization of special elements used in an SQL command (‘SQL injection’) vulnerability in The Wikimedia Foundation Mediawiki – Cargo Extension allows SQL Injection.

This issue affects Mediawiki – Cargo Extension: from * before 1.43.9,1.44.6,1.45.4.

Severity: 6.9 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…