Semantic MediaWiki vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

SM

Product

Semantic MediaWiki

by Semantic MediaWiki · last CVE Oct 27, 2026

9

CVEs

0

On KEV

6.1

Max CVSS

7

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 0High 0Medium 9Low 0

Severity

All severities9 Critical0 High0 Medium9 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Semantic MediaWiki to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-116892 New	6.1	–	Oct 27	SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via Special:Search smw Profile Affected: 3.1.0 before 7.3.1
CVE-2026-116891 New	6.1	–	Oct 27	SemanticMediaWiki 4.2.0 before 7.2.1 Reflected XSS via Special:FacetedSearch cstate Affected: 4.2.0 before 7.2.1
CVE-2026-116889 New	6.1	–	Oct 27	SemanticMediaWiki 2.5.0 before 7.3.1 Stored XSS via Special:Browse Code Property Affected: 2.5.0 before 7.3.1
CVE-2026-116884 New	6.1	–	Oct 27	SemanticMediaWiki 5.0.0 before 7.3.1 Stored XSS via Tooltip Module data-* Attributes Affected: 5.0.0 before 7.3.1
CVE-2026-116875 New	6.1	–	Oct 27	SemanticMediaWiki 3.0.0 before 7.3.1 Reflected XSS via Special:Ask Separator Parameters Affected: 3.0.0 before 7.3.1
CVE-2026-116874 New	6.1	–	Oct 27	SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via JsonResultPrinter Default Parameter Affected: 3.1.0 before 7.3.1
CVE-2022-48614	6.1	0%	Dec 10	Special:Ask in Semantic MediaWiki before 4.0.2 allows Reflected XSS Affected: before 4.0.2
CVE-2026-116888 New	5.4	–	Oct 27	SemanticMediaWiki 3.2.0 before 7.3.1 Stored XSS via Special:Browse Group Heading Affected: 3.2.0 before 7.3.1
CVE-2025-10354	5.1	0%	Apr 21	Reflected Cross-Site Scripting (XSS) in Semantic MediaWiki Affected: 5.0.2