Threats tagged 'ghsa-8x9p-9f27-hxfj'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2026-116891SemanticMediaWiki from 4.2.0 before 7.2.1 contains a reflected cross-site scripting vulnerability that allows Medium5.12026-10-27GCVE DatabaseCVE-2026-116891 SemanticMediaWiki versions from 4.2.0 up to but not including 7.2.1 contain a reflected cross-site scripting (XSS) vulnerability. This flaw allows unauthenticated attackers to inject malicious HTML and execute scripts in users' browsers via crafted URLs targeting the Special:FacetedSearch page. The vulnerability arises from unescaped cstate parameters that break out of hidden input attributes. The CVSS 3.1 base score is 6.1, indicating a medium severity issue. Report on CVE-2026-116891 Vulnerability CWE-79 #ghsa-8x9p-9f27-hxfj	GCVE Database	2026-10-27

Page 1 of 1