XSS in Semantic Mediawiki
CVE-2025-10354
Cross-Site Scripting (XSS) vulnerability reflected in Semantic MediaWiki. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL using the '/index.php/Speciaal:GefacetteerdZ…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.001 (21.0th percentile) — read the EPSS interpretation.
Affected products
- Semantic Mediawiki — versions 5.0.2
Weakness classification (CWE)
References
- cve-coordination@incibe.es (patch)