CVE-2026-58520 — UrlShortener defaults to ineffective validation, enabling third-party redirects

The MediaWiki UrlShortener Extension has an open redirect vulnerability that enables Cross-Site Flashing in certain versions.