CVE-2026-116887 Semantic MediaWiki 3.0.0 before 7.3.1 Stored XSS via Special:Browse Keyword Property

Semantic MediaWiki from 3.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject HTML through Keyword-typed property values rendered unescaped on Special:Browse. Attackers can annotate a Keyword property with an event-handler payloa...

CVE-2026-116887 Semantic MediaWiki 3.0.0 before 7.3.1 Stored XSS via Special:Browse Keyword Property

Semantic MediaWiki from 3.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject HTML through Keyword-typed property values rendered unescaped on Special:Browse. Attackers can annotate a Keyword property with an event-handler payloa...

CVE-2026-116887

Semantic MediaWiki versions 3.0.0 before 7.3.1 are vulnerable to a stored cross-site scripting (XSS) flaw. The issue occurs because Keyword-typed property values are rendered unescaped on the Special:Browse page. An attacker with page-edit rights can inject HTML, specifically using an event-handl...