CVE-2025-61682

8.6 Élevée

Publiée le 18/09/2026 à 18:17 · Modifiée le 14/10/2026 à 15:10 · En attente d'analyse NVD · Source : security-advisories@github.com

Description

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Versions starting in 3.1.0 and prior to 7.0.0 insert the unsanitized value of a data attribute into the DOM as HTML, allowing for stored XSS through wikitext. Version 7.0.0 patches the issue.

Traduire en français

Produits concernés

SemanticMediaWiki

Scores CVSS

Version	Score	Source	Vecteur
3.1	8.6 Élevée	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L`

Faiblesses (CWE)

CWE-79

Références

https://github.com/SemanticMediaWiki/SemanticMediaWiki/releases/tag/7.0.0
https://github.com/SemanticMediaWiki/SemanticMediaWiki/security/advisories/GHSA-hg8h-557g-q8pp
https://github.com/SemanticMediaWiki/SemanticMediaWiki/security/advisories/GHSA-hg8h-557g-q8pp

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories