[HIGH] StarCitizenWiki Extension Embed Video: Stored XSS via malformed src url with $wgEmbedVideoRequireConsent enabled

PKSA-wg3k-7dyt-r1n5 CVE-2026-55692 GHSA-5c7p-g73q-rpg5

Affected package: starcitizenwiki/embedvideo

Affected version: <=4.0.0

Reported by:
GitHub