Semantic MediaWiki cross-site scripting vulnerability

Semantic MediaWiki versions from 4.2.0 up to but including 7.3.1 contain a cross-site scripting vulnerability. This vulnerability arises because authenticated configuration or architecture editors can inject HTML via the FacetedSearch exploration-link tag. The ExploreListBuilder::buildHTML functi...