CVE-2026-77610

Semantic MediaWiki prior to version 7.2.0 is affected by a reflected XSS in its query debug output. The SMW\Query\DebugFormatter class assembles debug output (format=debug on Special:Ask) as raw HTML, and several sinks — buildHTML(), prettifySQL(), and prettifyExplain() — apply no output-context ...

EUVD-2026-83186

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, query debug output format=debug, or the debug request parameter on Special:Ask is assembled by SMW\Query\DebugFormatter and emitted as raw HTML...

CVE-2026-77610: Improper Neutralization of Input During Web Page Generation

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, query debug output format=debug, or the debug request parameter on Special:Ask is assembled by SMW\Query\DebugFormatter and emitted as raw HTML...