[HIGH] Mediawiki EmbedVideo Extension has stored XSS via malformed src url with $wgEmbedVideoRequireConsent disabled

PKSA-1f7b-5f9b-ggt9 CVE-2026-57440 GHSA-v65j-hff3-753c

Affected package: starcitizenwiki/embedvideo

Affected version: <=4.0.0

Reported by:
GitHub