Threats tagged 'ghsa-wqq7-744r-9mrr'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-116875SemanticMediaWiki from 3.0.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in Special:Ask Medium5.32026-10-27GCVE DatabaseCVE-2026-116875 SemanticMediaWiki versions from 3.0.0 up to but not including 7.3.1 contain a reflected cross-site scripting (XSS) vulnerability in the Special:Ask feature. This flaw arises because certain separator parameters are output without proper HTML escaping in various result printers. Unauthenticated attackers can exploit this by crafting malicious Special:Ask links that execute JavaScript in the context of the wiki, potentially stealing session cookies or CSRF tokens. Report on CVE-2026-116875 Vulnerability CWE-79 #ghsa-wqq7-744r-9mrr	GCVE Database	2026-10-27

Page 1 of 1