Semantic-Mediawiki

9 CVEs in 2 Semantic-Mediawiki products, including Semantic MediaWiki, Semantic MediaWiki. Newest: CVE-2026-116892 (2026-10-27).

Semantic-Mediawiki products with known CVEs

ProductCVEs
Semantic MediaWiki8
Semantic MediaWiki1
Semantic-Mediawiki CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-116892Medium6.12026-10-27SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject markup throug…
CVE-2026-116891Medium6.12026-10-27SemanticMediaWiki from 4.2.0 before 7.2.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject HTML via unes…
CVE-2026-116889Medium6.12026-10-27SemanticMediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject script through…
CVE-2026-116888Medium4.82026-10-27SemanticMediaWiki from 3.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with the smw-schemaedit right to inject markup…
CVE-2026-116884Medium6.12026-10-27SemanticMediaWiki from 5.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability in ext.smw.tooltip.tippy.js that renders data-* attributes via i…
CVE-2026-116875Medium6.12026-10-27SemanticMediaWiki from 3.0.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in Special:Ask, which outputs separator parameters (sep, prop…
CVE-2026-116874Medium6.12026-10-27SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts throu…
CVE-2025-103542026-04-21Cross-Site Scripting (XSS) vulnerability reflected in Semantic MediaWiki. This vulnerability allows an attacker to execute JavaScript code in the victim's brow…
CVE-2022-48614Medium6.12023-12-10Special:Ask in Semantic MediaWiki before 4.0.2 allows Reflected XSS.