CVE-2026-116885
Received Received - Intake

Reflected XSS in Semantic MediaWiki Special:SMWAdmin

Publication date: 2026-10-27

Last updated on: 2026-10-27

Assigner: VulnCheck

Description
Semantic MediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in the Special:SMWAdmin ID lookup that allows unauthenticated attackers to inject markup through the unescaped id parameter. Attackers can lure an smw-admin administrator into opening a crafted lookup link, bypassing the auto-satisfied edit-token check, to execute script and perform privileged actions in the administrator's session.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-27
Last Modified
2026-10-27
Generated
2026-10-27
AI Q&A
2026-10-27
EPSS Evaluated
N/A
NVD
CVE-2026-116885
EUVD
EUVD-2026-110713

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
SemanticMediaWiki SemanticMediaWiki 3.1.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a reflected cross-site scripting (XSS) vulnerability in Semantic MediaWiki versions 3.1.0 to 7.3.0. The issue occurs in the Special:SMWAdmin ID lookup feature where the unescaped 'id' parameter is reflected into an HTML warning box without proper sanitization. An attacker can trick an authenticated administrator into clicking a crafted link to execute malicious scripts in their session.

Detection Guidance

To detect this vulnerability, check if your Semantic MediaWiki instance is running a vulnerable version (3.1.0 to 7.3.0). Inspect the Special:SMWAdmin page for improperly escaped 'id' parameter handling. Look for reflected XSS patterns in HTTP responses from the ID lookup feature.

Impact Analysis

An attacker could perform session hijacking, steal CSRF tokens, or execute unauthorized privileged actions in the administrator's session. This could lead to full account compromise, data manipulation, or further lateral movement within the system.

Mitigation Strategies

Upgrade Semantic MediaWiki to version 7.3.1 or later immediately. If upgrading is not possible, apply a patch that escapes the 'id' parameter in the Special:SMWAdmin warning box or switch to an escaped message type. Temporarily restrict access to the Special:SMWAdmin page for administrators only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-116885. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart