semantic-mediawiki

7 records · 7 with a public proof-of-concept

Disclosed vulnerabilities where the NVD names semantic-mediawiki as an affected vendor, highest CVSS first.

  1. MEDIUM 6.1CVE-2026-116892public PoC2026-10-27

    SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject markup through the search parameter of the extended Special:Search profile. Attackers can send visitors crafted UR…

    semantic mediawiki

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 6.1CVE-2026-116891public PoC2026-10-27

    SemanticMediaWiki from 4.2.0 before 7.2.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject HTML via unescaped cstate parameters in Special:FacetedSearch. Attackers can craft URLs with q, a matching crc32 c…

    semantic mediawiki

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 6.1CVE-2026-116889public PoC2026-10-27

    SemanticMediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject script through Code-typed property values. Attackers can annotate a valid JSON value embedding HTML markup, which t…

    semantic mediawiki

    AI risk analysis on Exploit-DB.ai →

  4. MEDIUM 6.1CVE-2026-116884public PoC2026-10-27

    SemanticMediaWiki from 5.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability in ext.smw.tooltip.tippy.js that renders data-* attributes via innerHTML with allowHTML enabled. Editors can plant a .smw-highlighter span with a malicious data-cont…

    semantic mediawiki

    AI risk analysis on Exploit-DB.ai →

  5. MEDIUM 6.1CVE-2026-116875public PoC2026-10-27

    SemanticMediaWiki from 3.0.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in Special:Ask, which outputs separator parameters (sep, propsep, valuesep, delim, separator) without HTML escaping in list, category, DSV, and CSV result printer…

    semantic mediawiki

    AI risk analysis on Exploit-DB.ai →

  6. MEDIUM 6.1CVE-2026-116874public PoC2026-10-27

    SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the unescaped default parameter in JsonResultPrinter. Attackers can lure victims to a crafted Spec…

    semantic mediawiki

    AI risk analysis on Exploit-DB.ai →

  7. MEDIUM 4.8CVE-2026-116888public PoC2026-10-27

    SemanticMediaWiki from 3.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with the smw-schemaedit right to inject markup through an unescaped property group schema canonical_name. Attackers can save a schema whose canonic…

    semantic mediawiki

    AI risk analysis on Exploit-DB.ai →