CVE-2026-116887
Received Received - Intake

Stored XSS in Semantic MediaWiki via Unescaped Keyword Property Values

Publication date: 2026-10-27

Last updated on: 2026-10-27

Assigner: VulnCheck

Description
Semantic MediaWiki from 3.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject HTML through Keyword-typed property values rendered unescaped on Special:Browse. Attackers can annotate a Keyword property with an event-handler payload that executes JavaScript in viewers' sessions, including administrators, to read tokens and perform actions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-27
Last Modified
2026-10-27
Generated
2026-10-27
AI Q&A
2026-10-27
EPSS Evaluated
N/A
NVD
CVE-2026-116887
EUVD
EUVD-2026-110715

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
SemanticMediaWiki SemanticMediaWiki 3.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a stored cross-site scripting (XSS) vulnerability in Semantic MediaWiki versions 3.0.0 through 7.3.0. It occurs in the Special:Browse feature where Keyword-typed property values are rendered without proper escaping. Attackers with page-edit privileges can inject malicious HTML or JavaScript payloads into these properties. When viewed by others, including administrators, the payload executes in their sessions.

Detection Guidance

Check Semantic MediaWiki versions between 3.0.0 and 7.3.0 for the Special:Browse feature. Look for Keyword-typed properties with unescaped HTML or JavaScript payloads in property values. Review page-edit logs for suspicious modifications to Keyword properties.

Impact Analysis

An attacker could steal session tokens or perform unauthorized actions in your account if you view a page with the injected payload. This includes administrators, who might have elevated privileges compromised. The attack requires user interaction to view the page but no special privileges to execute.

Mitigation Strategies

Upgrade Semantic MediaWiki to version 7.3.1 or later immediately. Restrict page-edit privileges to trusted users only. Monitor Special:Browse pages for unexpected HTML/JS content. Implement input validation for Keyword properties to prevent injection.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-116887. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart