[ Vendor · 22 CVEs ]
SemanticMediaWiki
CVEs affecting SemanticMediaWiki published in the last 30 days, plus any SemanticMediaWiki CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-116887 | 27 Oct 2026 | CVSS 5.4 | SemanticMediaWikiSemantic MediaWiki from 3.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject… | |
| CVE-2026-116888 | 27 Oct 2026 | CVSS 5.4 | SemanticMediaWikiSemanticMediaWiki from 3.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with the smw-schemaedit right to… | |
| CVE-2026-116889 | 27 Oct 2026 | CVSS 6.1 | SemanticMediaWikiSemanticMediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject… | |
| CVE-2026-116890 | 27 Oct 2026 | CVSS 7.3 | SemanticMediaWikiSemantic MediaWiki from 3.0.0 before 7.3.0 contains a missing authorization vulnerability in the api.php smwtask module that allows unauthenticated… | |
| CVE-2026-116891 | 27 Oct 2026 | CVSS 6.1 | SemanticMediaWikiSemanticMediaWiki from 4.2.0 before 7.2.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject… | |
| CVE-2026-116892 | 27 Oct 2026 | CVSS 6.1 | SemanticMediaWikiSemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject… | Fix |
| CVE-2026-116880 | 27 Oct 2026 | CVSS 7.1 | SemanticMediaWikiSemantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site request forgery vulnerability in Special:SMWAdmin because it overwrites the… | |
| CVE-2026-116881 | 27 Oct 2026 | CVSS 6.1 | SemanticMediaWikiSemantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site scripting vulnerability that allows attackers to inject markup by storing malicious… | |
| CVE-2026-116882 | 27 Oct 2026 | CVSS 4.8 | SemanticMediaWikiSemantic MediaWiki from 4.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticated profile or schema editors… | |
| CVE-2026-116883 | 27 Oct 2026 | CVSS 4.8 | SemanticMediaWikiSemantic MediaWiki from 3.1.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticated schema editors to inject… | |
| CVE-2026-116884 | 27 Oct 2026 | CVSS 6.1 | SemanticMediaWikiSemanticMediaWiki from 5.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability in ext.smw.tooltip.tippy.js that renders data-*… | |
| CVE-2026-116885 | 27 Oct 2026 | CVSS 6.1 | SemanticMediaWikiSemantic MediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in the Special:SMWAdmin ID lookup that allows… | |
| CVE-2026-116886 | 27 Oct 2026 | CVSS 5.4 | SemanticMediaWikiSemantic MediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject… | |
| CVE-2026-116873 | 27 Oct 2026 | CVSS 7.3 | SemanticMediaWikiSemantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask API module that allows unauthenticated… | |
| CVE-2026-116874 | 27 Oct 2026 | CVSS 6.1 | SemanticMediaWikiSemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject… | |
| CVE-2026-116875 | 27 Oct 2026 | CVSS 6.1 | SemanticMediaWikiSemanticMediaWiki from 3.0.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in Special:Ask, which outputs separator parameters… | |
| CVE-2026-116876 | 27 Oct 2026 | CVSS 7.1 | SemanticMediaWikiSemantic MediaWiki from 2.5.0 before 7.3.1 contains an improper authorization vulnerability that allows ordinary editors to permanently protect pages… | Fix |
| CVE-2026-116877 | 27 Oct 2026 | CVSS 6.5 | SemanticMediaWikiSemantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows low-privilege editors to bypass… | Fix |
| CVE-2026-116878 | 27 Oct 2026 | CVSS 7.5 | SemanticMediaWikiSemantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows anonymous attackers to force… | Fix |
| CVE-2026-116879 | 27 Oct 2026 | CVSS 5.4 | SemanticMediaWikiSemantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask update task that allows users with edit… | Fix |
| CVE-2026-116871 | 27 Oct 2026 | CVSS 7.5 | SemanticMediaWikiSemantic MediaWiki 3.0.0 before 7.3.1 contains an uncontrolled recursion vulnerability in LegacyParser::getSubqueryDescription() that processes… | Fix |
| CVE-2026-116872 | 27 Oct 2026 | CVSS 7.5 | SemanticMediaWikiSemantic MediaWiki from 3.0.0 before 7.3.1 contains an algorithmic complexity vulnerability in TermParser::normalize_compact_form() that allows… | Fix |