Semanticmediawiki vulnerabilities
38 CVEs and advisories name Semanticmediawiki as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-116871Semantic MediaWiki 3.0.0 before 7.3.1 Uncontrolled Recursion via Special:Ask
- CVE-2026-77616Semantic MediaWiki affected by reflected XSS in `Special:Ask` via a forged cursor pagination token
- CVE-2026-77610Semantic MediaWiki has a query debug output XSS (`DebugFormatter`)
- CVE-2026-77609Semantic MediaWiki has an open redirect in Special:URIResolver
- CVE-2026-77607Semantic MediaWiki affected by Special:Ask table `sep` parameter reflected XSS
- CVE-2026-77608Semantic MediaWiki has reflected XSS in `Special:SearchByProperty` (`property` and `value` parameters)
- CVE-2026-77606Semantic MediaWiki has reflected XSS in Special:Ask plain table headers
- CVE-2025-61682Semantic MediaWiki vulnerable to stored XSS through wikitext via improper use of non-reserved data attributes