CyberRota Analysis
AI-GeneratedSemantic MediaWiki versions 3.1.0 through 6.9.9 are vulnerable to stored cross-site scripting (XSS) due to the insertion of unsanitized data attributes into the DOM as HTML. This vulnerability can be exploited by attackers to execute malicious scripts in the context of users accessing the affected wikis, potentially leading to data theft or session hijacking. Organizations using these versions should prioritize upgrading to version 7.0.0 or later to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Versions starting in 3.1.0 and prior to 7.0.0 insert the unsanitized value of a data attribute into the DOM as HTML, allowing for stored XSS through wikitext. Version 7.0.0 patches the issue.