GHSA-4fr3-ghqj-28wx: Semantic MediaWiki before 7.3.1 Reflected XSS via Special:SMWAdmin id Parameter

Published Oct 27, 2026

Updated

Semantic MediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in the Special:SMWAdmin ID lookup that allows unauthenticated attackers to inject markup through the unescaped id parameter. Attackers can lure an smw-admin administrator into opening a crafted lookup link, bypassing the auto-satisfied edit-token check, to execute script and perform privileged actions in the administrator's session.

Event History

Oct 27, 2026

CVE Published

via OSV·10:23 AM

Data Sourced

via OSV·10:23 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is realistically exposed to this issue?

Installations running Semantic MediaWiki versions 3.1.0 through before 7.3.1 are affected. Exploitation targets users with smw-admin administrative privileges rather than requiring the attacker to have an account.

What does an attacker need to exploit it?

An attacker needs to persuade an smw-admin administrator to open a crafted Special:SMWAdmin ID lookup link. The attacker can send the link without authentication, and successful exploitation requires that administrator interaction.

What is the likely impact if exploitation succeeds?

Injected script executes in the administrator's session and can perform privileged actions using that session. The issue bypasses the auto-satisfied edit-token check.

GHSA-4fr3-ghqj-28wx: Semantic MediaWiki before 7.3.1 Reflected XSS via Special:SMWAdmin id Parameter

Event History

Frequently Asked Questions

Who is realistically exposed to this issue?

What does an attacker need to exploit it?

What is the likely impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

Who is realistically exposed to this issue?

What does an attacker need to exploit it?

What is the likely impact if exploitation succeeds?