Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

SemanticMediaWiki — Vulnerabilities & Security Advisories 38

Browse all 38 CVE security advisories affecting SemanticMediaWiki. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page aggregates known security weaknesses associated with the SemanticMediaWiki vendor, specifically focusing on the Semantic MediaWiki extension for MediaWiki under the tag of web application vulnerabilities. The collection encompasses a broad spectrum of flaws including cross-site scripting, SQL injection, and improper access control issues discovered in releases spanning from the initial public versions through to the most recent updates over the last decade. Users can utilize this resource to track the vendor's official security advisories, analyze the characteristics and impact of specific weakness classes prevalent in semantic web extensions, or examine the complete historical vulnerability record for the Semantic MediaWiki product line. By centralizing these disparate reports, the page offers a structured view of the security evolution and risk landscape surrounding this critical MediaWiki component without requiring navigation across multiple external databases or fragmented advisory sources. This compilation serves as a technical reference for security researchers, system administrators, and developers seeking to assess the historical security posture and current exposure of systems relying on Semantic MediaWiki functionality.

Top products by SemanticMediaWiki: SemanticMediaWiki
CVE ID Title CVSS Severity Published
CVE-2026-126567 Semantic MediaWiki 3.0.0 before 7.4.1 Stored XSS via Special:Ask Debug Output — SemanticMediaWiki CWE-79 5.4 Medium 2026-11-11
CVE-2026-126566 Semantic MediaWiki 7.3.1 before 7.4.1 Incorrect Authorization via Edit Protection Annotations — SemanticMediaWiki CWE-863 7.1 High 2026-11-11
CVE-2026-126565 Semantic MediaWiki 3.0.0 before 7.4.1 DoS via Exponential Concept Expansion — SemanticMediaWiki CWE-407 4.3 Medium 2026-11-11
CVE-2026-126564 Semantic MediaWiki 2.5.0 before 7.4.1 Stored XSS via Special:Browse Factbox Title — SemanticMediaWiki CWE-79 5.4 Medium 2026-11-11
CVE-2026-126562 Semantic MediaWiki 3.0.0 before 7.4.1 Uncontrolled Recursion via ElasticStore ConceptDescriptionInterpreter — SemanticMediaWiki CWE-674 4.3 Medium 2026-11-11
CVE-2026-126563 Semantic MediaWiki 2.4.0 before 7.4.1 Reflected XSS via Special:Ask Date Format — SemanticMediaWiki CWE-79 6.1 Medium 2026-11-11
CVE-2026-126561 Semantic MediaWiki 2.5.0 before 7.4.1 Missing Authorization via Is edit protected Annotation — SemanticMediaWiki CWE-862 7.1 High 2026-11-11
CVE-2026-126559 Semantic MediaWiki 4.2.0 before 7.4.1 Stored XSS via Special:FacetedSearch — SemanticMediaWiki CWE-79 4.8 Medium 2026-11-11
CVE-2026-126560 Semantic MediaWiki 3.0.0 before 7.4.1 Stored XSS via data-search Attributes — SemanticMediaWiki CWE-79 5.4 Medium 2026-11-11
CVE-2026-116892 SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via Special:Search smw Profile — SemanticMediaWiki CWE-79 6.1 Medium 2026-10-27
CVE-2026-116891 SemanticMediaWiki 4.2.0 before 7.2.1 Reflected XSS via Special:FacetedSearch cstate — SemanticMediaWiki CWE-79 6.1 Medium 2026-10-27
CVE-2026-116890 Semantic MediaWiki 3.0.0 before 7.3.0 Missing Authorization via smwtask API — SemanticMediaWiki CWE-862 7.3 High 2026-10-27
CVE-2026-116889 SemanticMediaWiki 2.5.0 before 7.3.1 Stored XSS via Special:Browse Code Property — SemanticMediaWiki CWE-79 6.1 Medium 2026-10-27
CVE-2026-116888 SemanticMediaWiki 3.2.0 before 7.3.1 Stored XSS via Special:Browse Group Heading — SemanticMediaWiki CWE-79 4.8 Medium 2026-10-27
CVE-2026-116887 Semantic MediaWiki 3.0.0 before 7.3.1 Stored XSS via Special:Browse Keyword Property — SemanticMediaWiki CWE-79 5.4 Medium 2026-10-27
CVE-2026-116885 Semantic MediaWiki before 7.3.1 Reflected XSS via Special:SMWAdmin id Parameter — SemanticMediaWiki CWE-79 6.1 Medium 2026-10-27
CVE-2026-116886 Semantic MediaWiki before 7.3.1 Stored XSS via External Identifier in Special:Browse — SemanticMediaWiki CWE-79 5.4 Medium 2026-10-27
CVE-2026-116884 SemanticMediaWiki 5.0.0 before 7.3.1 Stored XSS via Tooltip Module data-* Attributes — SemanticMediaWiki CWE-79 6.1 Medium 2026-10-27
CVE-2026-116883 Semantic MediaWiki 3.1.0 before 7.3.1 Stored XSS via Schema Descriptions — SemanticMediaWiki CWE-79 4.8 Medium 2026-10-27
CVE-2026-116882 Semantic MediaWiki 4.2.0 before 7.3.1 Stored XSS via FacetedSearch Exploration Labels — SemanticMediaWiki CWE-79 4.8 Medium 2026-10-27
CVE-2026-116881 Semantic MediaWiki 3.0.0 before 7.3.1 XSS via Property-Value Autocomplete — SemanticMediaWiki CWE-79 6.1 Medium 2026-10-27
CVE-2026-116880 Semantic MediaWiki 3.0.0 before 7.3.1 CSRF via Special:SMWAdmin Maintenance Actions — SemanticMediaWiki CWE-352 7.1 High 2026-10-27
CVE-2026-116879 Semantic MediaWiki 7.3.0 before 7.3.1 Missing Authorization via smwtask Update Task — SemanticMediaWiki CWE-862 5.4 Medium 2026-10-27
CVE-2026-116878 Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via Special:PropertyLabelSimilarity — SemanticMediaWiki CWE-400 7.5 High 2026-10-27
CVE-2026-116877 Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via #set_recurring_event — SemanticMediaWiki CWE-770 6.5 Medium 2026-10-27
CVE-2026-116876 Semantic MediaWiki 2.5.0 before 7.3.1 Missing Authorization via Is edit protected — SemanticMediaWiki CWE-862 7.1 High 2026-10-27
CVE-2026-116875 SemanticMediaWiki 3.0.0 before 7.3.1 Reflected XSS via Special:Ask Separator Parameters — SemanticMediaWiki CWE-79 6.1 Medium 2026-10-27
CVE-2026-116873 Semantic MediaWiki 7.3.0 Missing Authorization via smwtask API run-joblist and update — SemanticMediaWiki CWE-862 7.3 High 2026-10-27
CVE-2026-116874 SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via JsonResultPrinter Default Parameter — SemanticMediaWiki CWE-79 6.1 Medium 2026-10-27
CVE-2026-116872 Semantic MediaWiki 3.0.0 before 7.3.1 Denial of Service via Special:Search Compact Filters — SemanticMediaWiki CWE-407 7.5 High 2026-10-27

This page lists every published CVE security advisory associated with SemanticMediaWiki. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.