Description
SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject markup through the search parameter of the extended Special:Search profile. Attackers can send visitors crafted URLs using the smw profile with SVG event handlers, which ProfileForm::profile_sheet inserts unescaped into a pre element, executing script in the wiki origin.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SemanticMediaWiki SemanticMediaWiki
Default version status: unaffected
3.1.0 to < 7.3.1affected7.3.1unaffected
References
- https://github.com/SemanticMediaWiki/SemanticMediaWiki/security/advisories/GHSA-375v-wx2r-4598 ↗
- https://github.com/SemanticMediaWiki/SemanticMediaWiki/commit/a77e592320707499769c9386a33d97bc966d9418 ↗
- https://www.vulncheck.com/advisories/semanticmediawiki-3.1.0-before-7.3.1-reflected-xss-via-special-search-smw-profile ↗