Medium severity4.8NVD Advisory· Published Oct 27, 2026
CVE-2026-116883
CVE-2026-116883
Description
Semantic MediaWiki from 3.1.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticated schema editors to inject HTML through schema descriptions. Attackers with the smw-schemaedit permission can save HTML that is passed unescaped to Html::rawElement() in HtmlBuilder, altering pages and targeting users who view the schema.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <7.3.1
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.