SSemanticMediaWiki

Products

Exploited and recent CVEs

• CVE-2026-116892 Medium 6.1 SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via Special:Search smw Profile 0.2%
• CVE-2026-116891 Medium 6.1 SemanticMediaWiki 4.2.0 before 7.2.1 Reflected XSS via Special:FacetedSearch cstate 0.2%
• CVE-2026-116890 High 7.3 Semantic MediaWiki 3.0.0 before 7.3.0 Missing Authorization via smwtask API 0.2%
• CVE-2026-116889 Medium 6.1 SemanticMediaWiki 2.5.0 before 7.3.1 Stored XSS via Special:Browse Code Property 0.2%
• CVE-2026-116888 Medium 4.8 SemanticMediaWiki 3.2.0 before 7.3.1 Stored XSS via Special:Browse Group Heading 0.1%
• CVE-2026-116887 Medium 5.4 Semantic MediaWiki 3.0.0 before 7.3.1 Stored XSS via Special:Browse Keyword Property 0.1%
• CVE-2026-116886 Medium 5.4 Semantic MediaWiki before 7.3.1 Stored XSS via External Identifier in Special:Browse 0.1%
• CVE-2026-116885 Medium 6.1 Semantic MediaWiki before 7.3.1 Reflected XSS via Special:SMWAdmin id Parameter 0.2%
• CVE-2026-116884 Medium 6.1 SemanticMediaWiki 5.0.0 before 7.3.1 Stored XSS via Tooltip Module data-* Attributes 0.2%
• CVE-2026-116883 Medium 4.8 Semantic MediaWiki 3.1.0 before 7.3.1 Stored XSS via Schema Descriptions 0.2%
• CVE-2026-116882 Medium 4.8 Semantic MediaWiki 4.2.0 before 7.3.1 Stored XSS via FacetedSearch Exploration Labels 0.2%
• CVE-2026-116881 Medium 6.1 Semantic MediaWiki 3.0.0 before 7.3.1 XSS via Property-Value Autocomplete 0.2%
• CVE-2026-116880 High 7.1 Semantic MediaWiki 3.0.0 before 7.3.1 CSRF via Special:SMWAdmin Maintenance Actions 0.1%
• CVE-2026-116879 Medium 5.4 Semantic MediaWiki 7.3.0 before 7.3.1 Missing Authorization via smwtask Update Task 0.2%
• CVE-2026-116878 High 7.5 Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via Special:PropertyLabelSimilarity 0.4%
• CVE-2026-116877 Medium 6.5 Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via #set_recurring_event 0.4%
• CVE-2026-116876 High 7.1 Semantic MediaWiki 2.5.0 before 7.3.1 Missing Authorization via Is edit protected 0.2%
• CVE-2026-116875 Medium 6.1 SemanticMediaWiki 3.0.0 before 7.3.1 Reflected XSS via Special:Ask Separator Parameters 0.2%
• CVE-2026-116874 Medium 6.1 SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via JsonResultPrinter Default Parameter 0.2%
• CVE-2026-116873 High 7.3 Semantic MediaWiki 7.3.0 Missing Authorization via smwtask API run-joblist and update 0.2%
• CVE-2026-116872 High 7.5 Semantic MediaWiki 3.0.0 before 7.3.1 Denial of Service via Special:Search Compact Filters 0.4%
• CVE-2026-116871 High 7.5 Semantic MediaWiki 3.0.0 before 7.3.1 Uncontrolled Recursion via Special:Ask 0.4%
• CVE-2026-77616 Medium 6.1 Semantic MediaWiki affected by reflected XSS in `Special:Ask` via a forged cursor pagination token 0.3%
• CVE-2026-77610 Medium 6.1 Semantic MediaWiki has a query debug output XSS (`DebugFormatter`) 0.3%
• CVE-2026-77609 Medium 6.1 Semantic MediaWiki has an open redirect in Special:URIResolver 0.3%
• CVE-2026-77607 Medium 6.1 Semantic MediaWiki affected by Special:Ask table `sep` parameter reflected XSS 0.3%
• CVE-2026-77608 Medium 6.1 Semantic MediaWiki has reflected XSS in `Special:SearchByProperty` (`property` and `value` parameters) 0.3%
• CVE-2026-77606 Medium 6.1 Semantic MediaWiki has reflected XSS in Special:Ask plain table headers 0.3%
• CVE-2025-61682 High 8.6 Semantic MediaWiki vulnerable to stored XSS through wikitext via improper use of non-reserved data attributes 0.4%