18 matches found
CVE-2026-77610
Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, query debug output format=debug, or the debug request parameter on Special:Ask is assembled by SMW\Query\DebugFormatter and emitted as raw HTML...
Semantic MediaWiki affected by reflected XSS in `Special:Ask` via a forged cursor pagination token
Reflected XSS via a forged cursor pagination token Failure mode Special:Ask accepts a cursor query parameter for keyset pagination added in 7.0.0. The token is decoded by CursorEncoder, which is an unsigned base64url-encoded JSON blob, so its contents are fully attacker-controlled. When the...
CVE-2026-77616
Semantic MediaWiki versions 7.0.0–7.1.0 are affected by a reflected XSS in the Special:Ask page. The cursor query parameter (introduced for keyset pagination in 7.0.0) is an unsigned base64url-encoded JSON blob, making its contents fully attacker-controlled. When the cursor's sort anchor mismatch...
EUVD-2026-83189
Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. In versions 7.0.0 through 7.1.0, Special:Ask accepts a cursor query parameter for keyset pagination added in 7.0.0. The token is decoded by CursorEncoder, which is an...
CVE-2026-77616 Semantic MediaWiki affected by reflected XSS in `Special:Ask` via a forged cursor pagination token
Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. In versions 7.0.0 through 7.1.0, Special:Ask accepts a cursor query parameter for keyset pagination added in 7.0.0. The token is decoded by CursorEncoder, which is an...
CVE-2026-77610 Semantic MediaWiki has a query debug output XSS (`DebugFormatter`)
Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, query debug output format=debug, or the debug request parameter on Special:Ask is assembled by SMW\Query\DebugFormatter and emitted as raw HTML...
CVE-2026-77607 Semantic MediaWiki affected by Special:Ask table `sep` parameter reflected XSS
Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, sep was inserted verbatim into HTML cell joins. This made it possible to inject HTML through the separator value. Version 7.2.0 fixes the issue...
EUVD-2026-83181
Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, sep was inserted verbatim into HTML cell joins. This made it possible to inject HTML through the separator value. Version 7.2.0 fixes the issue...
CVE-2026-77607
Semantic MediaWiki , a free open-source MediaWiki extension, had a reflected XSS vulnerability in versions prior to 7.2.0 . The sep parameter in the Special:Ask table renderer was inserted verbatim into HTML cell joins, allowing an attacker to inject arbitrary HTML through the separator value. Pe...
Semantic MediaWiki affected by Special:Ask table `sep` parameter reflected XSS
Failure mode sep was inserted verbatim into the HTML that joins a table cell's values. This made it possible to inject HTML through the separator value. The same unsanitised table HTML is produced both for the standard Special:Ask render and for its raw request output requesttype=raw, so the...
CVE-2026-77606
Semantic MediaWiki , a free open-source extension to MediaWiki, is affected by a reflected XSS vulnerability in Special:Ask when the headers=plain option is used. Table header text was emitted into elements via a raw HTML path , allowing user-controlled mainlabel content to become executable HTM...
EUVD-2026-83171
Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, when headers=plain, table header text was emitted into via a raw HTML path. User-controlled mainlabel content could therefore become executable...
CVE-2026-77606 Semantic MediaWiki has reflected XSS in Special:Ask plain table headers
Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, when headers=plain, table header text was emitted into via a raw HTML path. User-controlled mainlabel content could therefore become executable...
Cross-site Scripting in Semantic MediaWiki
Special:Ask in Semantic MediaWiki before 4.0.2 allows Reflected XSS...
GHSA-HJ4C-VFC4-5F9C Cross-site Scripting in Semantic MediaWiki
Special:Ask in Semantic MediaWiki before 4.0.2 allows Reflected XSS...
CVE-2022-48614
Special:Ask in Semantic MediaWiki before 4.0.2 allows Reflected XSS...
CVE-2022-48614
The CVE-2022-48614 issue affects Semantic MediaWiki prior to 4.0.2, where Special:Ask is vulnerable to Reflected XSS. The underlying flaw enables an attacker to inject malicious content that is reflected in the response, potentially impacting users who interact with the wizard or search interface...