Threats tagged 'ghsa-h32m-8349-hq44'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-116884SemanticMediaWiki from 5.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability in Medium5.32026-10-27GCVE DatabaseCVE-2026-116884 SemanticMediaWiki versions from 5.0.0 up to but not including 7.3.1 contain a stored cross-site scripting (XSS) vulnerability in the ext.smw.tooltip.tippy.js component. This vulnerability arises because data-* attributes are rendered via innerHTML with allowHTML enabled, allowing editors to inject malicious JavaScript through specially crafted .smw-highlighter spans. When other users, including administrators, hover over these elements, the malicious script executes. Report on CVE-2026-116884 Vulnerability CWE-79 #ghsa-h32m-8349-hq44	GCVE Database	2026-10-27

Page 1 of 1