CVE-2026-77606

Name of the Vulnerable Software and Affected Versions Semantic MediaWiki versions prior to 7.2.0

Description When the headers parameter is set to plain, table header text is emitted into the <th> element via a raw HTML path. This allows user-controlled content within the mainlabel variable to be executed as HTML. The issue occurs because the TableResultPrinter function failed to apply output-context escaping before passing plain headers to the table renderer.

Recommendations Update to version 7.2.0.