CVE-2026-77607

Name of the Vulnerable Software and Affected Versions Semantic MediaWiki versions prior to 7.2.0

Description Semantic MediaWiki is an open-source extension for MediaWiki used to store and query data. The software fails to sanitize the sep variable when it is inserted into the HTML that joins table cell values. This allows for HTML injection via the separator value. This issue affects both the standard Special:Ask render and the raw request output when the request type parameter is set to raw, making the injection possible without authentication.

Recommendations Update Semantic MediaWiki to version 7.2.0.