Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2026-77607

Semantic MediaWiki affected by Special:Ask table `sep` parameter reflected XSS

Description

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, `sep` was inserted verbatim into HTML cell joins. This made it possible to inject HTML through the separator value. Version 7.2.0 fixes the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SemanticMediaWiki SemanticMediaWiki

  • < 7.2.0affected

References