Advisories · Technology
SemanticMediaWiki.
Every CVE that names SemanticMediaWiki among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via Special:Search smw Profile
- SemanticMediaWiki
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
SemanticMediaWiki 2.5.0 before 7.3.1 Stored XSS via Special:Browse Code Property
- SemanticMediaWiki
- Cross-site scripting (XSS)
- CVSS 4.8 Medium
SemanticMediaWiki 3.2.0 before 7.3.1 Stored XSS via Special:Browse Group Heading
- SemanticMediaWiki
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Semantic MediaWiki 3.0.0 before 7.3.1 Stored XSS via Special:Browse Keyword Property
- SemanticMediaWiki
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Semantic MediaWiki before 7.3.1 Stored XSS via External Identifier in Special:Browse
- SemanticMediaWiki
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Semantic MediaWiki before 7.3.1 Reflected XSS via Special:SMWAdmin id Parameter
- SemanticMediaWiki
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
SemanticMediaWiki 5.0.0 before 7.3.1 Stored XSS via Tooltip Module data-* Attributes
- SemanticMediaWiki
- Cross-site scripting (XSS)
- CVSS 4.8 Medium
Semantic MediaWiki 3.1.0 before 7.3.1 Stored XSS via Schema Descriptions
- SemanticMediaWiki
- Cross-site scripting (XSS)
- CVSS 4.8 Medium
Semantic MediaWiki 4.2.0 before 7.3.1 Stored XSS via FacetedSearch Exploration Labels
- SemanticMediaWiki
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Semantic MediaWiki 3.0.0 before 7.3.1 XSS via Property-Value Autocomplete
- SemanticMediaWiki
- Cross-site scripting (XSS)
- CVSS 7.1 High
Semantic MediaWiki 3.0.0 before 7.3.1 CSRF via Special:SMWAdmin Maintenance Actions
- SemanticMediaWiki
- Cross-site request forgery (CSRF)
- CVSS 6.9 Medium
Semantic MediaWiki 7.3.0 before 7.3.1 Missing Authorization via smwtask Update Task
- SemanticMediaWiki
- Broken access control
- CVSS 8.7 High
Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via Special:PropertyLabelSimilarity
- SemanticMediaWiki
- Denial of service
- CVSS 8.7 High
Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via #set_recurring_event
- SemanticMediaWiki
- Denial of service
- CVSS 7.1 High
Semantic MediaWiki 2.5.0 before 7.3.1 Missing Authorization via Is edit protected
- SemanticMediaWiki
- Broken access control
- CVSS 5.3 Medium
SemanticMediaWiki 3.0.0 before 7.3.1 Reflected XSS via Special:Ask Separator Parameters
- SemanticMediaWiki
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via JsonResultPrinter Default Parameter
- SemanticMediaWiki
- Cross-site scripting (XSS)
- CVSS 6.9 Medium
Semantic MediaWiki 7.3.0 Missing Authorization via smwtask API run-joblist and update
- SemanticMediaWiki
- Broken access control
- CVSS 8.7 High
Semantic MediaWiki 3.0.0 before 7.3.1 Denial of Service via Special:Search Compact Filters
- SemanticMediaWiki
- Denial of service
- CVSS 8.7 High
Semantic MediaWiki 3.0.0 before 7.3.1 Uncontrolled Recursion via Special:Ask
- SemanticMediaWiki
- Denial of service