Live › vulnerability › CVE-2026-116887
Go to dashboardSemantic MediaWiki versions 3.0.0 through 7.3.0 render Keyword-typed property values unescaped on Special:Browse. A user with page-edit rights can store an event-handler payload that runs JavaScript in other viewers' sessions, including administrators.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 11:31 UTC. All times on this page are UTC.
Wikis running Semantic MediaWiki from 3.0.0 before 7.3.1 are exposed. The risk is greatest where many users can edit pages and administrators browse Special:Browse, since the payload executes in their sessions. Wikis without the extension, or on 7.3.1 or later, are not affected.
No product ranges from the sources yet.
7.3.1 (unknown whether the sources give a specific check beyond this)7.3.1 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Semantic MediaWiki from 3.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject HTML through Keyword-typed property values rendered unescaped on Special:Browse. Attackers can annotate a Keyword property with an event-handler payload that executes JavaScript in viewers' sessions, including administrators, to read tokens and perform actions.
This page as .md · .json · in your agent: get_signal("CVE-2026-116887")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.