Threats tagged 'ghsa-g72f-25hp-crjf'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-116881Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site scripting vulnerability that allows attackers to Medium5.32026-10-27GCVE DatabaseCVE-2026-116881 Semantic MediaWiki versions from 3.0.0 up to but not including 7.3.1 contain a cross-site scripting (XSS) vulnerability. This flaw allows attackers to inject malicious markup into semantic property values that are rendered unescaped in autocomplete suggestions. When a user opens the property-value autocomplete with an empty query, the vulnerable JavaScript concatenates raw API values into HTML, potentially executing arbitrary scripts. Report on CVE-2026-116881 Vulnerability CWE-79 #ghsa-g72f-25hp-crjf	GCVE Database	2026-10-27

Page 1 of 1