PT-2026-95518

Name of the Vulnerable Software and Affected Versions Semantic MediaWiki versions 7.0.0 through 7.1.0 Description A reflected cross-site scripting issue exists in the Special:Ask endpoint. The application accepts a cursor query parameter for keyset pagination, which is decoded by CursorEncoder as...

CVE-2026-77616: Improper Neutralization of Input During Web Page Generation

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. In versions 7.0.0 through 7.1.0, Special:Ask accepts a cursor query parameter for keyset pagination added in 7.0.0. The token is decoded by CursorEncoder, which is an...