CVE-2026-116881

Semantic MediaWiki versions 3.0.0 before 7.3.1 are vulnerable to a cross-site scripting (XSS) vulnerability. The root cause is the unescaped rendering of malicious semantic property values in autocomplete suggestions. Specifically, when a user opens the property-value autocomplete with an empty q...

CVE-2026-116881 Semantic MediaWiki 3.0.0 before 7.3.1 XSS via Property-Value Autocomplete

Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site scripting vulnerability that allows attackers to inject markup by storing malicious semantic property values rendered unescaped in autocomplete suggestions. When another user opens the property-value autocomplete with an empty query...