Live › vulnerability › CVE-2026-116892
Go to dashboardSemantic MediaWiki versions 3.1.0 through 7.3.0 fail to escape the search parameter on the extended Special:Search profile, so a crafted URL with SVG event handlers is reflected into the page. A visitor who opens such a link runs attacker script in the wiki's origin.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 11:31 UTC. All times on this page are UTC.
Wikis running Semantic MediaWiki from 3.1.0 before 7.3.1 that expose Special:Search with the extended smw profile. Unauthenticated visitors can be targeted by crafted links, so public wikis are the main exposure. Wikis on versions 7.3.1 or later, or without the extension, are not affected.
No product ranges from the sources yet.
composer.lock / extension.jsonsmw search profile being enabled on Special:Search7.3.1 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject markup through the search parameter of the extended Special:Search profile. Attackers can send visitors crafted URLs using the smw profile with SVG event handlers, which ProfileForm::profile_sheet inserts unescaped into a pre element, executing script in the wiki origin.
This page as .md · .json · in your agent: get_signal("CVE-2026-116892")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.