CVE-2026-116882
Received Received - Intake

Stored XSS in Semantic MediaWiki via FacetedSearch Labels

Publication date: 2026-10-27

Last updated on: 2026-10-27

Assigner: VulnCheck

Description
Semantic MediaWiki from 4.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticated profile or schema editors to inject HTML through FacetedSearch exploration-link labels. Attackers can store markup in the label, which ExploreListBuilder::buildHTML() passes unescaped to Html::rawElement(), altering the Special:FacetedSearch page and potentially running scripts in viewers' browsers.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-27
Last Modified
2026-10-27
Generated
2026-10-27
AI Q&A
2026-10-27
EPSS Evaluated
N/A
NVD
CVE-2026-116882
EUVD
EUVD-2026-110710

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
SemanticMediaWiki SemanticMediaWiki 4.2.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a stored cross-site scripting (XSS) vulnerability in Semantic MediaWiki versions 4.2.0 through 7.3.0. Authenticated profile or schema editors can inject malicious HTML through exploration-link labels in the FacetedSearch feature. The unescaped input is passed to Html::rawElement(), allowing stored markup to execute scripts in users' browsers when viewing the Special:FacetedSearch page.

Detection Guidance

To detect this vulnerability, check Semantic MediaWiki versions between 4.2.0 and 7.3.0. Review Special:FacetedSearch pages for suspicious exploration-link labels containing HTML or script tags. Inspect user edits to profile or schema fields for injected markup. Use browser developer tools to examine rendered HTML for unescaped content in exploration links.

Impact Analysis

An attacker with edit permissions could modify the UI to steal session cookies, redirect users to malicious sites, or perform actions on their behalf. Regular users viewing the affected page may have scripts executed in their browsers without their knowledge.

Compliance Impact

This XSS vulnerability could lead to unauthorized data access or modification, violating GDPR's integrity and confidentiality principles or HIPAA's security requirements for protected health information. Organizations may face compliance penalties if user data is compromised through such attacks.

Mitigation Strategies

Upgrade Semantic MediaWiki to version 7.3.1 or later. Implement strict input validation for exploration-link labels, escaping all user-supplied content before rendering. Restrict profile and schema editor permissions to trusted users only. Monitor Special:FacetedSearch pages for unauthorized HTML changes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-116882. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart