Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

mediawiki/semantic-media-wiki

10 known vulnerabilities (1 high, 8 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
10 · 1 high, 8 medium
Registry
Packagist

Advisories 10

  • CVE-2026-116891Medium 5.1

    SemanticMediaWiki 4.2.0 before 7.2.1 Reflected XSS via Special:FacetedSearch cstate

    Affected: from 4.2.0, fixed in 7.2.1.

  • CVE-2026-116890Medium 6.9

    Semantic MediaWiki 3.0.0 before 7.3.0 Missing Authorization via smwtask API

    Affected: from 3.0.0, fixed in 7.3.0.

  • CVE-2026-77616Medium 6.1

    Semantic MediaWiki affected by reflected XSS in `Special:Ask` via a forged cursor pagination token

    Affected: from 7.0.0, fixed in 7.2.0.

  • CVE-2026-77610Medium 6.1

    Semantic MediaWiki has a query debug output XSS (`DebugFormatter`)

    Affected: fixed in 7.2.0.

  • CVE-2026-77609Medium 6.1

    Semantic MediaWiki has an open redirect in Special:URIResolver

    Affected: fixed in 7.2.0.

  • CVE-2026-77607Medium 6.1

    Semantic MediaWiki affected by Special:Ask table `sep` parameter reflected XSS

    Affected: fixed in 7.2.0.

  • CVE-2026-77608Medium 6.1

    Semantic MediaWiki has reflected XSS in `Special:SearchByProperty` (`property` and `value` parameters)

    Affected: fixed in 7.2.0.

  • CVE-2026-77606Medium 6.1

    Semantic MediaWiki has reflected XSS in Special:Ask plain table headers

    Affected: fixed in 7.2.0.

  • Semantic MediaWiki vulnerable to stored XSS through wikitext via improper use of non-reserved data attributes

    Affected: from 3.1.0, fixed in 7.0.0.

  • Special:Ask in Semantic MediaWiki before 4.0.2 allows Reflected XSS.

    Affected: fixed in 4.0.2.