mediawiki/semantic-media-wiki
Packagist10 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting mediawiki/semantic-media-wikipage 1 of 1
- CVE-2022-48614MEDIUMCVSS 6.1EG 6.1fixed in 4.0.22023-12-10
vulnerable: 1.9 ... 4.0.1 (64 versions)
Special:Ask in Semantic MediaWiki before 4.0.2 allows Reflected XSS.
- CVE-2025-61682HIGHCVSS 8.6EG 8.6fixed in 7.0.02026-09-18
vulnerable: 3.1.0 ... 6.0.1 (27 versions)
Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Versions starting in 3.1.0 and prior to 7.0.0 insert the unsanitized value of a data attribute into the DOM as H…
- CVE-2026-116890HIGHCVSS 7.3EG 7.3fixed in 7.3.02026-10-27
vulnerable: 3.0.0 ... 7.2.1 (35 versions)
Semantic MediaWiki from 3.0.0 before 7.3.0 contains a missing authorization vulnerability in the api.php smwtask module that allows unauthenticated attackers to run admin-only maintenance tasks. Attackers can use the public anonymous CSRF …
- CVE-2026-116891MEDIUMCVSS 6.1EG 6.1fixed in 7.2.12026-10-27
vulnerable: 4.2.0 ... 7.2.0 (10 versions)
SemanticMediaWiki from 4.2.0 before 7.2.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject HTML via unescaped cstate parameters in Special:FacetedSearch. Attackers can craft URLs with …
- CVE-2026-77606MEDIUMCVSS 6.1EG 6.1fixed in 7.2.02026-09-18
vulnerable: 1.9 ... 7.1.0 (78 versions)
Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, when `headers=plain`, table header text was emitted into `<th>` via a raw HTML path. Use…
- CVE-2026-77607MEDIUMCVSS 6.1EG 6.1fixed in 7.2.02026-09-18
vulnerable: 1.9 ... 7.1.0 (78 versions)
Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, `sep` was inserted verbatim into HTML cell joins. This made it possible to inject HTML t…
- CVE-2026-77608MEDIUMCVSS 6.1EG 6.1fixed in 7.2.02026-09-18
vulnerable: 1.9 ... 7.1.0 (78 versions)
Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, when the `value` parameter was reflected back into rendered output and error messaging p…
- CVE-2026-77609MEDIUMCVSS 6.1EG 6.1fixed in 7.2.02026-09-18
vulnerable: 1.9 ... 7.1.0 (78 versions)
Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, `Special:URIResolver` resolves its user-controlled subpage to a MediaWiki title and issu…
- CVE-2026-77610MEDIUMCVSS 6.1EG 6.1fixed in 7.2.02026-09-18
vulnerable: 1.9 ... 7.1.0 (78 versions)
Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, query debug output (`format=debug`, or the `debug` request parameter on `Special:Ask`) i…
- CVE-2026-77616MEDIUMCVSS 6.1EG 6.1fixed in 7.2.02026-09-18
vulnerable: 7.0.0, 7.1.0
Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. In versions 7.0.0 through 7.1.0, `Special:Ask` accepts a `cursor` query parameter for keyset pagination (added i…
Check whether mediawiki/semantic-media-wiki is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for mediawiki/semantic-media-wiki CVEs against the assets you own.
Book a Demo →