Semanticmediawiki vulnerabilities
38 CVEs and advisories name Semanticmediawiki as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-126567Semantic MediaWiki 3.0.0 before 7.4.1 Stored XSS via Special:Ask Debug Output
- CVE-2026-126566Semantic MediaWiki 7.3.1 before 7.4.1 Incorrect Authorization via Edit Protection Annotations
- CVE-2026-126565Semantic MediaWiki 3.0.0 before 7.4.1 DoS via Exponential Concept Expansion
- CVE-2026-126564Semantic MediaWiki 2.5.0 before 7.4.1 Stored XSS via Special:Browse Factbox Title
- CVE-2026-126563Semantic MediaWiki 2.4.0 before 7.4.1 Reflected XSS via Special:Ask Date Format
- CVE-2026-126562Semantic MediaWiki 3.0.0 before 7.4.1 Uncontrolled Recursion via ElasticStore ConceptDescriptionInterpreter
- CVE-2026-126561Semantic MediaWiki 2.5.0 before 7.4.1 Missing Authorization via Is edit protected Annotation
- CVE-2026-126560Semantic MediaWiki 3.0.0 before 7.4.1 Stored XSS via data-search Attributes
- CVE-2026-126559Semantic MediaWiki 4.2.0 before 7.4.1 Stored XSS via Special:FacetedSearch
- CVE-2026-116892SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via Special:Search smw Profile
- CVE-2026-116891SemanticMediaWiki 4.2.0 before 7.2.1 Reflected XSS via Special:FacetedSearch cstate
- CVE-2026-116890Semantic MediaWiki 3.0.0 before 7.3.0 Missing Authorization via smwtask API
- CVE-2026-116889SemanticMediaWiki 2.5.0 before 7.3.1 Stored XSS via Special:Browse Code Property
- CVE-2026-116888SemanticMediaWiki 3.2.0 before 7.3.1 Stored XSS via Special:Browse Group Heading
- CVE-2026-116887Semantic MediaWiki 3.0.0 before 7.3.1 Stored XSS via Special:Browse Keyword Property
- CVE-2026-116886Semantic MediaWiki before 7.3.1 Stored XSS via External Identifier in Special:Browse
- CVE-2026-116885Semantic MediaWiki before 7.3.1 Reflected XSS via Special:SMWAdmin id Parameter
- CVE-2026-116884SemanticMediaWiki 5.0.0 before 7.3.1 Stored XSS via Tooltip Module data- Attributes
- CVE-2026-116883Semantic MediaWiki 3.1.0 before 7.3.1 Stored XSS via Schema Descriptions
- CVE-2026-116882Semantic MediaWiki 4.2.0 before 7.3.1 Stored XSS via FacetedSearch Exploration Labels
- CVE-2026-116881Semantic MediaWiki 3.0.0 before 7.3.1 XSS via Property-Value Autocomplete
- CVE-2026-116880Semantic MediaWiki 3.0.0 before 7.3.1 CSRF via Special:SMWAdmin Maintenance Actions
- CVE-2026-116879Semantic MediaWiki 7.3.0 before 7.3.1 Missing Authorization via smwtask Update Task
- CVE-2026-116878Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via Special:PropertyLabelSimilarity
- CVE-2026-116877Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via #set_recurring_event
- CVE-2026-116876Semantic MediaWiki 2.5.0 before 7.3.1 Missing Authorization via Is edit protected
- CVE-2026-116875SemanticMediaWiki 3.0.0 before 7.3.1 Reflected XSS via Special:Ask Separator Parameters
- CVE-2026-116874SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via JsonResultPrinter Default Parameter
- CVE-2026-116873Semantic MediaWiki 7.3.0 Missing Authorization via smwtask API run-joblist and update
- CVE-2026-116872Semantic MediaWiki 3.0.0 before 7.3.1 Denial of Service via Special:Search Compact Filters