Reflected XSS Vulnerability in SemanticMediaWiki by Semantic MediaWiki
CVE-2026-116892

5.3MEDIUM

Key Information:

Vendor

Semanticmediawiki

Status
Semanticmediawiki
Vendor
CVE Published:
27 October 2026

What is CVE-2026-116892?

The SemanticMediaWiki application prior to version 7.3.1 is susceptible to a reflected XSS vulnerability. This flaw arises when the application improperly handles user input, particularly in the search parameter of the Special:Search profile. An unauthenticated attacker can craft URLs containing malicious markup, which can then be executed in a user's browser if they access the crafted URL. The vulnerability allows the incorporation of unescaped content into the application, potentially leading to the execution of arbitrary scripts within the context of the affected wiki.

Affected Version(s)

SemanticMediaWiki 3.1.0 < 7.3.1

SemanticMediaWiki 7.3.1

References

https://github.com/SemanticMediaWiki/SemanticMediaWiki/se...
vendor-advisory
https://github.com/SemanticMediaWiki/SemanticMediaWiki/co...
patch
https://www.vulncheck.com/advisories/semanticmediawiki-3....
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

AlpetGexha
.