Cross-site Scripting (XSS)

Semantic MediaWiki is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper sanitization of the sep parameter when it is inserted into HTML cell joins, which allows an attacker to inject malicious HTML content and execute scripts in a victim's browser...

CVE-2026-77607

Semantic MediaWiki , a free open-source MediaWiki extension, had a reflected XSS vulnerability in versions prior to 7.2.0 . The sep parameter in the Special:Ask table renderer was inserted verbatim into HTML cell joins, allowing an attacker to inject arbitrary HTML through the separator value. Pe...

CVE-2026-77607 Semantic MediaWiki affected by Special:Ask table `sep` parameter reflected XSS

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, sep was inserted verbatim into HTML cell joins. This made it possible to inject HTML through the separator value. Version 7.2.0 fixes the issue...

CVE-2026-77607 Semantic MediaWiki affected by Special:Ask table `sep` parameter reflected XSS

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, sep was inserted verbatim into HTML cell joins. This made it possible to inject HTML through the separator value. Version 7.2.0 fixes the issue...

Semantic MediaWiki affected by Special:Ask table `sep` parameter reflected XSS

Failure mode sep was inserted verbatim into the HTML that joins a table cell's values. This made it possible to inject HTML through the separator value. The same unsanitised table HTML is produced both for the standard Special:Ask render and for its raw request output requesttype=raw, so the...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the sep parameter in the table rendering process. An attacker can execute arbitrary scripts in the context of the user's browser by injecting malicious HTML through the unsanitized separator value. Details...

GHSA-7XV3-GF2G-498H Semantic MediaWiki affected by Special:Ask table `sep` parameter reflected XSS

Failure mode sep was inserted verbatim into the HTML that joins a table cell's values. This made it possible to inject HTML through the separator value. The same unsanitised table HTML is produced both for the standard Special:Ask render and for its raw request output requesttype=raw, so the...

CVE-2006-2093: Undefined Security Weakness

Nessus before 2.2.8, and 3.x before 3.0.3, allows user-assisted attackers to cause a denial of service memory consumption via a NASL script that calls split with an invalid sep parameter. NOTE: a design goal of the NASL language is to facilitate sharing of security tests by guaranteeing that a...