SE
Product
SemanticMediaWiki
29
CVEs
0
On KEV
8.6
Max CVSS
22
New 30D
Severity mix
Critical 0High 8Medium 21Low 0
Watch
Add SemanticMediaWiki to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-61682 | 8.6 | Sep 18 | Semantic MediaWiki vulnerable to stored XSS through wikitext via improper use of non-reserved data attributes Affected: >= 3.1.0, < 7.0.0 |
| CVE-2026-116878 New | 7.5 | Oct 27 | Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via Special:PropertyLabelSimilarity Affected: 2.5.0 before 7.3.1 |
| CVE-2026-116872 New | 7.5 | Oct 27 | Semantic MediaWiki 3.0.0 before 7.3.1 Denial of Service via Special:Search Compact Filters Affected: 3.0.0 before 7.3.1 |
| CVE-2026-116871 New | 7.5 | Oct 27 | Semantic MediaWiki 3.0.0 before 7.3.1 Uncontrolled Recursion via Special:Ask Affected: 3.0.0 before 7.3.1 |
| CVE-2026-116890 New | 7.3 | Oct 27 | Semantic MediaWiki 3.0.0 before 7.3.0 Missing Authorization via smwtask API Affected: 3.0.0 before 7.3.0 |
| CVE-2026-116873 New | 7.3 | Oct 27 | Semantic MediaWiki 7.3.0 Missing Authorization via smwtask API run-joblist and update Affected: 7.3.0 before 7.3.1 |
| CVE-2026-116880 New | 7.1 | Oct 27 | Semantic MediaWiki 3.0.0 before 7.3.1 CSRF via Special:SMWAdmin Maintenance Actions Affected: 3.0.0 before 7.3.1 |
| CVE-2026-116876 New | 7.1 | Oct 27 | Semantic MediaWiki 2.5.0 before 7.3.1 Missing Authorization via Is edit protected Affected: 2.5.0 before 7.3.1 |
| CVE-2026-116877 New | 6.5 | Oct 27 | Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via #set_recurring_event Affected: 2.5.0 before 7.3.1 |
| CVE-2026-116892 New | 6.1 | Oct 27 | SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via Special:Search smw Profile Affected: 3.1.0 before 7.3.1 |
| CVE-2026-116891 New | 6.1 | Oct 27 | SemanticMediaWiki 4.2.0 before 7.2.1 Reflected XSS via Special:FacetedSearch cstate Affected: 4.2.0 before 7.2.1 |
| CVE-2026-116889 New | 6.1 | Oct 27 | SemanticMediaWiki 2.5.0 before 7.3.1 Stored XSS via Special:Browse Code Property Affected: 2.5.0 before 7.3.1 |
| CVE-2026-116885 New | 6.1 | Oct 27 | Semantic MediaWiki before 7.3.1 Reflected XSS via Special:SMWAdmin id Parameter Affected: 3.1.0 before 7.3.1 |
| CVE-2026-116884 New | 6.1 | Oct 27 | SemanticMediaWiki 5.0.0 before 7.3.1 Stored XSS via Tooltip Module data-* Attributes Affected: 5.0.0 before 7.3.1 |
| CVE-2026-116881 New | 6.1 | Oct 27 | Semantic MediaWiki 3.0.0 before 7.3.1 XSS via Property-Value Autocomplete Affected: 3.0.0 before 7.3.1 |
| CVE-2026-116875 New | 6.1 | Oct 27 | SemanticMediaWiki 3.0.0 before 7.3.1 Reflected XSS via Special:Ask Separator Parameters Affected: 3.0.0 before 7.3.1 |
| CVE-2026-116874 New | 6.1 | Oct 27 | SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via JsonResultPrinter Default Parameter Affected: 3.1.0 before 7.3.1 |
| CVE-2026-77616 | 6.1 | Sep 18 | Semantic MediaWiki affected by reflected XSS in `Special:Ask` via a forged cursor pagination token Affected: >= 7.0.0, < 7.2.0 |
| CVE-2026-77610 | 6.1 | Sep 18 | Semantic MediaWiki has a query debug output XSS (`DebugFormatter`) Affected: < 7.2.0 |
| CVE-2026-77609 | 6.1 | Sep 18 | Semantic MediaWiki has an open redirect in Special:URIResolver Affected: < 7.2.0 |
| CVE-2026-77607 | 6.1 | Sep 18 | Semantic MediaWiki affected by Special:Ask table `sep` parameter reflected XSS Affected: < 7.2.0 |
| CVE-2026-77608 | 6.1 | Sep 18 | Semantic MediaWiki has reflected XSS in `Special:SearchByProperty` (`property` and `value` parameters) Affected: < 7.2.0 |
| CVE-2026-77606 | 6.1 | Sep 18 | Semantic MediaWiki has reflected XSS in Special:Ask plain table headers Affected: < 7.2.0 |
| CVE-2026-116888 New | 5.4 | Oct 27 | SemanticMediaWiki 3.2.0 before 7.3.1 Stored XSS via Special:Browse Group Heading Affected: 3.2.0 before 7.3.1 |
| CVE-2026-116887 New | 5.4 | Oct 27 | Semantic MediaWiki 3.0.0 before 7.3.1 Stored XSS via Special:Browse Keyword Property Affected: 3.0.0 before 7.3.1 |
| CVE-2026-116886 New | 5.4 | Oct 27 | Semantic MediaWiki before 7.3.1 Stored XSS via External Identifier in Special:Browse Affected: 2.5.0 before 7.3.1 |
| CVE-2026-116879 New | 5.4 | Oct 27 | Semantic MediaWiki 7.3.0 before 7.3.1 Missing Authorization via smwtask Update Task Affected: 7.3.0 before 7.3.1 |
| CVE-2026-116883 New | 4.8 | Oct 27 | Semantic MediaWiki 3.1.0 before 7.3.1 Stored XSS via Schema Descriptions Affected: 3.1.0 before 7.3.1 |
| CVE-2026-116882 New | 4.8 | Oct 27 | Semantic MediaWiki 4.2.0 before 7.3.1 Stored XSS via FacetedSearch Exploration Labels Affected: 4.2.0 before 7.3.1 |
Showing 29