CVE-2026-116892 | Medium | 6.1 | 2026-10-27 | SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject markup throug… |
CVE-2026-116891 | Medium | 6.1 | 2026-10-27 | SemanticMediaWiki from 4.2.0 before 7.2.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject HTML via unes… |
CVE-2026-116890 | High | 7.3 | 2026-10-27 | Semantic MediaWiki from 3.0.0 before 7.3.0 contains a missing authorization vulnerability in the api.php smwtask module that allows unauthenticated attackers t… |
CVE-2026-116889 | Medium | 6.1 | 2026-10-27 | SemanticMediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject script through… |
CVE-2026-116888 | Medium | 4.8 | 2026-10-27 | SemanticMediaWiki from 3.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with the smw-schemaedit right to inject markup… |
CVE-2026-116887 | Medium | 5.4 | 2026-10-27 | Semantic MediaWiki from 3.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject HTML through… |
CVE-2026-116886 | Medium | 5.4 | 2026-10-27 | Semantic MediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject scripts via E… |
CVE-2026-116885 | Medium | 6.1 | 2026-10-27 | Semantic MediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in the Special:SMWAdmin ID lookup that allows unauthenticate… |
CVE-2026-116884 | Medium | 6.1 | 2026-10-27 | SemanticMediaWiki from 5.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability in ext.smw.tooltip.tippy.js that renders data-* attributes via i… |
CVE-2026-116883 | Medium | 4.8 | 2026-10-27 | Semantic MediaWiki from 3.1.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticated schema editors to inject HTML through… |
CVE-2026-116882 | Medium | 4.8 | 2026-10-27 | Semantic MediaWiki from 4.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticated profile or schema editors to inject H… |
CVE-2026-116881 | Medium | 6.1 | 2026-10-27 | Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site scripting vulnerability that allows attackers to inject markup by storing malicious semantic p… |
CVE-2026-116880 | High | 7.1 | 2026-10-27 | Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site request forgery vulnerability in Special:SMWAdmin because it overwrites the wpEditToken with a… |
CVE-2026-116879 | Medium | 5.4 | 2026-10-27 | Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask update task that allows users with edit rights to forc… |
CVE-2026-116878 | High | 7.5 | 2026-10-27 | Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows anonymous attackers to force quadratic compu… |
CVE-2026-116877 | Medium | 6.5 | 2026-10-27 | Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows low-privilege editors to bypass smwgMaxNumRe… |
CVE-2026-116876 | High | 7.1 | 2026-10-27 | Semantic MediaWiki from 2.5.0 before 7.3.1 contains an improper authorization vulnerability that allows ordinary editors to permanently protect pages by adding… |
CVE-2026-116875 | Medium | 6.1 | 2026-10-27 | SemanticMediaWiki from 3.0.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in Special:Ask, which outputs separator parameters (sep, prop… |
CVE-2026-116874 | Medium | 6.1 | 2026-10-27 | SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts throu… |
CVE-2026-116873 | High | 7.3 | 2026-10-27 | Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask API module that allows unauthenticated attackers to ru… |
CVE-2026-116872 | High | 7.5 | 2026-10-27 | Semantic MediaWiki from 3.0.0 before 7.3.1 contains an algorithmic complexity vulnerability in TermParser::normalize_compact_form() that allows unauthenticated… |
CVE-2026-116871 | High | 7.5 | 2026-10-27 | Semantic MediaWiki 3.0.0 before 7.3.1 contains an uncontrolled recursion vulnerability in LegacyParser::getSubqueryDescription() that processes nested query to… |
CVE-2026-77616 | Medium | 6.1 | 2026-09-18 | Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. In versions 7.0.0 through 7.1.0… |
CVE-2026-77610 | Medium | 6.1 | 2026-09-18 | Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, query de… |
CVE-2026-77609 | Medium | 6.1 | 2026-09-18 | Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, `Special… |
CVE-2026-77608 | Medium | 6.1 | 2026-09-18 | Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, when the… |
CVE-2026-77607 | Medium | 6.1 | 2026-09-18 | Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, `sep` wa… |
CVE-2026-77606 | Medium | 6.1 | 2026-09-18 | Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, when `he… |
CVE-2025-61682 | High | 8.6 | 2026-09-18 | Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Versions starting in 3.1.0 and p… |