Semanticmediawiki
Approved changes feed: RSS · Atom
cpe:2.3:a:semanticmediawiki:semanticmediawiki:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Semanticmediawiki (0f2e1a50-aed1-51dd-b21a-f96f9ed0a8d3) |
|---|---|
| Product | Semanticmediawiki (ba594a65-224e-5b72-8917-61ed35f8971c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-116884 |
vulnerable | 2026-11-03 10:15:22.112764 |
SemanticMediaWiki 5.0.0 before 7.3.1 Stored XSS via Tooltip Module data-* Attributes
MEDIUM (6.1)
SemanticMediaWiki from 5.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability in ext.smw.tooltip.tippy.js that renders data-* attributes via innerHTML with allowHTML enabled. Editors can plant a .smw-highlighter span with a malicious data-content, data-title, data-top, data-bottom, or data-theme attribute to execute JavaScript when viewers, including administrators, hover it.
Published: 2026-10-27T10:23:35.114Z
Updated: 2026-10-31T02:35:53.341Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116875 |
vulnerable | 2026-11-03 10:15:22.093650 |
SemanticMediaWiki 3.0.0 before 7.3.1 Reflected XSS via Special:Ask Separator Parameters
MEDIUM (6.1)
SemanticMediaWiki from 3.0.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in Special:Ask, which outputs separator parameters (sep, propsep, valuesep, delim, separator) without HTML escaping in list, category, DSV, and CSV result printers. Unauthenticated attackers can send victims crafted Special:Ask links using request_type=raw or request_type=special_page to execute JavaScript in the wiki's origin, stealing sessions or CSRF tokens.
Published: 2026-10-27T10:23:28.974Z
Updated: 2026-11-04T16:47:56.088Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116880 |
vulnerable | 2026-11-03 10:15:22.066220 |
Semantic MediaWiki 3.0.0 before 7.3.1 CSRF via Special:SMWAdmin Maintenance Actions
HIGH (7.1)
Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site request forgery vulnerability in Special:SMWAdmin because it overwrites the wpEditToken with a freshly generated valid token. Attackers can lure an authenticated smw-admin user to a malicious page that triggers schema setup, entity-disposal, or job actions, causing semantic data loss and resource exhaustion.
Published: 2026-10-27T10:23:32.391Z
Updated: 2026-10-31T02:34:43.400Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116871 |
vulnerable | 2026-11-03 10:15:22.036843 |
Semantic MediaWiki 3.0.0 before 7.3.1 Uncontrolled Recursion via Special:Ask
HIGH (7.5)
Semantic MediaWiki 3.0.0 before 7.3.1 contains an uncontrolled recursion vulnerability in LegacyParser::getSubqueryDescription() that processes nested query tokens before depth limits apply. Unauthenticated attackers can submit deeply nested query elements to the action=ask API to consume substantial CPU and memory, tying up request workers.
Published: 2026-10-27T10:23:26.290Z
Updated: 2026-11-04T16:49:51.284Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116879 |
vulnerable | 2026-11-03 10:15:21.969734 |
Semantic MediaWiki 7.3.0 before 7.3.1 Missing Authorization via smwtask Update Task
MEDIUM (5.4)
Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask update task that allows users with edit rights to force semantic updates on arbitrary pages. Attackers can supply a serialized subject parameter for a restricted page to trigger forced reparsing, semantic-store writes, and resource-intensive dependency work.
Published: 2026-10-27T10:23:31.684Z
Updated: 2026-11-04T16:08:12.633Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116890 |
vulnerable | 2026-11-03 10:15:21.955966 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116888 |
vulnerable | 2026-11-03 10:15:21.945411 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116878 |
vulnerable | 2026-11-03 10:15:21.779071 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116891 |
vulnerable | 2026-11-03 10:15:21.775616 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116889 |
vulnerable | 2026-11-03 10:15:21.755499 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116885 |
vulnerable | 2026-11-03 10:15:21.752313 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116874 |
vulnerable | 2026-11-03 10:15:21.735217 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116881 |
vulnerable | 2026-11-03 10:15:21.711400 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116887 |
vulnerable | 2026-11-03 10:15:21.569611 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116876 |
vulnerable | 2026-11-03 10:15:21.556052 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116883 |
vulnerable | 2026-11-03 10:15:21.516808 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116872 |
vulnerable | 2026-11-03 10:15:21.500571 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116886 |
vulnerable | 2026-11-03 10:15:21.493445 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116877 |
vulnerable | 2026-11-03 10:15:21.475316 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116882 |
vulnerable | 2026-11-03 10:15:21.429085 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116873 |
vulnerable | 2026-11-03 10:15:21.401835 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116892 |
vulnerable | 2026-11-03 10:15:21.286977 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-77609 |
vulnerable | 2026-10-13 12:28:29.608092 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-77608 |
vulnerable | 2026-10-13 12:28:29.553510 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-77610 |
vulnerable | 2026-10-13 12:28:29.545429 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-77616 |
vulnerable | 2026-10-13 12:28:29.435381 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-77606 |
vulnerable | 2026-10-13 12:28:29.381393 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-77607 |
vulnerable | 2026-10-13 12:28:29.338616 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61682 |
vulnerable | 2026-10-13 12:23:17.653782 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.