Semantic MediaWiki versions from 2.5.0 up to but not including 7.4.1 contain a missing authorization vulnerability. This flaw allows editors who do not have the edit-protection right to lock pages by adding an 'Is edit protected' annotation. By adding [[Is edit protected::true]] to pages or setting it in widely transcluded templates, attackers can cause the TitleQuickPermissions hook to block other editors and administrators from editing, moving, or deleting affected pages indefinitely.