Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

SemanticMediaWiki — Vulnerabilities & Security Advisories 38

All 38 CVE vulnerabilities found in SemanticMediaWiki, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security weaknesses affecting the SemanticMediaWiki extension, a semantic data management tool for MediaWiki, tagged by specific vulnerability classifications. The collection encompasses a comprehensive range of issues including cross-site scripting, remote code execution, and information disclosure flaws reported between the year 2012 and the present day. Visitors can utilize this resource to track official vendor advisories regarding SemanticMediaWiki, analyze the prevalence and impact of specific weakness classes within the MediaWiki ecosystem, or review the complete historical vulnerability record for this product to support security audits and patch management strategies. The data is sourced directly from public advisories and coordinated disclosures to ensure accuracy without speculative entries. By consolidating these findings into a single view, the page facilitates efficient risk assessment for system administrators and developers maintaining instances that rely on semantic data capabilities. This structured approach allows for quick identification of unpatched systems and helps organizations prioritize remediation efforts based on the severity and nature of the disclosed defects. The information remains strictly factual, focusing on technical details and mitigation guidance provided by the original reporters and the SemanticMediaWiki development team.

Vendor: SemanticMediaWiki

CVE ID Title CVSS Severity Published
CVE-2026-126567 Semantic MediaWiki 3.0.0 before 7.4.1 Stored XSS via Special:Ask Debug Output CWE-79 5.4 Medium 2026-11-11
CVE-2026-126566 Semantic MediaWiki 7.3.1 before 7.4.1 Incorrect Authorization via Edit Protection Annotations CWE-863 7.1 High 2026-11-11
CVE-2026-126565 Semantic MediaWiki 3.0.0 before 7.4.1 DoS via Exponential Concept Expansion CWE-407 4.3 Medium 2026-11-11
CVE-2026-126564 Semantic MediaWiki 2.5.0 before 7.4.1 Stored XSS via Special:Browse Factbox Title CWE-79 5.4 Medium 2026-11-11
CVE-2026-126562 Semantic MediaWiki 3.0.0 before 7.4.1 Uncontrolled Recursion via ElasticStore ConceptDescriptionInterpreter CWE-674 4.3 Medium 2026-11-11
CVE-2026-126563 Semantic MediaWiki 2.4.0 before 7.4.1 Reflected XSS via Special:Ask Date Format CWE-79 6.1 Medium 2026-11-11
CVE-2026-126561 Semantic MediaWiki 2.5.0 before 7.4.1 Missing Authorization via Is edit protected Annotation CWE-862 7.1 High 2026-11-11
CVE-2026-126559 Semantic MediaWiki 4.2.0 before 7.4.1 Stored XSS via Special:FacetedSearch CWE-79 4.8 Medium 2026-11-11
CVE-2026-126560 Semantic MediaWiki 3.0.0 before 7.4.1 Stored XSS via data-search Attributes CWE-79 5.4 Medium 2026-11-11
CVE-2026-116892 SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via Special:Search smw Profile CWE-79 6.1 Medium 2026-10-27
CVE-2026-116891 SemanticMediaWiki 4.2.0 before 7.2.1 Reflected XSS via Special:FacetedSearch cstate CWE-79 6.1 Medium 2026-10-27
CVE-2026-116890 Semantic MediaWiki 3.0.0 before 7.3.0 Missing Authorization via smwtask API CWE-862 7.3 High 2026-10-27
CVE-2026-116889 SemanticMediaWiki 2.5.0 before 7.3.1 Stored XSS via Special:Browse Code Property CWE-79 6.1 Medium 2026-10-27
CVE-2026-116888 SemanticMediaWiki 3.2.0 before 7.3.1 Stored XSS via Special:Browse Group Heading CWE-79 4.8 Medium 2026-10-27
CVE-2026-116887 Semantic MediaWiki 3.0.0 before 7.3.1 Stored XSS via Special:Browse Keyword Property CWE-79 5.4 Medium 2026-10-27
CVE-2026-116885 Semantic MediaWiki before 7.3.1 Reflected XSS via Special:SMWAdmin id Parameter CWE-79 6.1 Medium 2026-10-27
CVE-2026-116886 Semantic MediaWiki before 7.3.1 Stored XSS via External Identifier in Special:Browse CWE-79 5.4 Medium 2026-10-27
CVE-2026-116884 SemanticMediaWiki 5.0.0 before 7.3.1 Stored XSS via Tooltip Module data-* Attributes CWE-79 6.1 Medium 2026-10-27
CVE-2026-116883 Semantic MediaWiki 3.1.0 before 7.3.1 Stored XSS via Schema Descriptions CWE-79 4.8 Medium 2026-10-27
CVE-2026-116882 Semantic MediaWiki 4.2.0 before 7.3.1 Stored XSS via FacetedSearch Exploration Labels CWE-79 4.8 Medium 2026-10-27
CVE-2026-116881 Semantic MediaWiki 3.0.0 before 7.3.1 XSS via Property-Value Autocomplete CWE-79 6.1 Medium 2026-10-27
CVE-2026-116880 Semantic MediaWiki 3.0.0 before 7.3.1 CSRF via Special:SMWAdmin Maintenance Actions CWE-352 7.1 High 2026-10-27
CVE-2026-116879 Semantic MediaWiki 7.3.0 before 7.3.1 Missing Authorization via smwtask Update Task CWE-862 5.4 Medium 2026-10-27
CVE-2026-116878 Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via Special:PropertyLabelSimilarity CWE-400 7.5 High 2026-10-27
CVE-2026-116877 Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via #set_recurring_event CWE-770 6.5 Medium 2026-10-27
CVE-2026-116876 Semantic MediaWiki 2.5.0 before 7.3.1 Missing Authorization via Is edit protected CWE-862 7.1 High 2026-10-27
CVE-2026-116875 SemanticMediaWiki 3.0.0 before 7.3.1 Reflected XSS via Special:Ask Separator Parameters CWE-79 6.1 Medium 2026-10-27
CVE-2026-116873 Semantic MediaWiki 7.3.0 Missing Authorization via smwtask API run-joblist and update CWE-862 7.3 High 2026-10-27
CVE-2026-116874 SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via JsonResultPrinter Default Parameter CWE-79 6.1 Medium 2026-10-27
CVE-2026-116872 Semantic MediaWiki 3.0.0 before 7.3.1 Denial of Service via Special:Search Compact Filters CWE-407 7.5 High 2026-10-27

All 38 known CVE vulnerabilities affecting SemanticMediaWiki with full Chinese analysis, references, and POCs where available.