Threats tagged 'ghsa-vffw-jhh9-h949'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.8	CVE-2026-116882Semantic MediaWiki from 4.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows Medium4.82026-10-27GCVE DatabaseCVE-2026-116882 Semantic MediaWiki versions from 4.2.0 up to but not including 7.3.1 contain a stored cross-site scripting (XSS) vulnerability. This flaw allows authenticated users with profile or schema editing permissions to inject malicious HTML through FacetedSearch exploration-link labels. The injected markup is passed unescaped to the page rendering function, potentially enabling script execution in the browsers of users viewing the affected Special:FacetedSearch page. Report on CVE-2026-116882 Vulnerability CWE-79 #ghsa-vffw-jhh9-h949	GCVE Database	2026-10-27

Page 1 of 1