Stored Cross-Site Scripting in Semantic MediaWiki by Semantic MediaWiki

CVE-2026-126560

What is CVE-2026-126560?

Semantic MediaWiki contains a stored cross-site scripting vulnerability that affects versions prior to 7.4.1. This flaw resides in the integration of DataTables, which allows users with page-edit privileges to incorporate HTML entity-encoded markup within data-search or data-filter cell attributes. If exploited, this enables the execution of malicious scripts in the browsers of users, including site administrators, potentially leading to unauthorized access or data manipulation.

References