GHSA-574v-j8hf-88h3: SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via JsonResultPrinter Default Parameter

Published Oct 27, 2026

Updated

SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the unescaped default parameter in JsonResultPrinter. Attackers can lure victims to a crafted Special:Ask link with a zero-result query and requesttype=specialpage, executing JavaScript in the wiki origin to steal sessions or CSRF tokens.

Event History

Oct 27, 2026

CVE Published

via OSV·10:23 AM

Data Sourced

via OSV·10:23 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed to this issue?

SemanticMediaWiki versions from 3.1.0 through versions before 7.3.1 are affected. Exploitation targets the Special:Ask endpoint when a crafted request uses a zero-result query and request_type=special_page.

What must an attacker do to exploit it?

The attacker does not need authentication, but must persuade a victim to open a crafted Special:Ask link. The link injects script through the unescaped default parameter in JsonResultPrinter.

What is the practical impact if exploitation succeeds?

JavaScript executes in the wiki's origin in the victim's browser. This can allow theft of session or CSRF tokens and can affect confidentiality and integrity in the wiki origin.

GHSA-574v-j8hf-88h3: SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via JsonResultPrinter Default Parameter

Event History

Frequently Asked Questions

Which deployments are exposed to this issue?

What must an attacker do to exploit it?

What is the practical impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed to this issue?

What must an attacker do to exploit it?

What is the practical impact if exploitation succeeds?