[HIGH] mediawiki/maps has stored XSS through the overlays parameter in the display_map parser function

PKSA-hjtx-83wm-5fvj CVE-2026-52854 GHSA-4h7g-5542-v3fc

Affected package: mediawiki/maps

Affected version: <12.1.3

Reported by:
GitHub