https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T21:08:09.581697+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-372383 EUVD-2026-372383 2026-10-05T21:08:09.583956+00:00 EUVD-2026-372383 https://cve.radiocsirt.org/vuln/fkie_cve-2026-77607 fkie_cve-2026-77607 2026-10-05T21:08:09.583989+00:00

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, `sep` was inserted verbatim into HTML cell joins. This made it possible to inject HTML through the separator value. Version 7.2.0 fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-7xv3-gf2g-498h GHSA-7xv3-gf2g-498h — Semantic MediaWiki affected by Special:Ask table `sep` parameter reflected XSS 2026-10-05T21:08:09.584021+00:00

Affected: Packagist: mediawiki/semantic-media-wiki

#### Failure mode

`sep` was inserted verbatim into the HTML that joins a table cell's values. This made it possible to inject HTML through the separator value. The same unsanitised table HTML is produced both for the standard `Special:Ask` render and for its raw request output (`request_type=raw`), so the injection was reachable without authentication.

#### Remediation

- In all non-wiki output modes (HTML, raw request, file), `sep` is escaped unless it is a safe `<br>` variant. - This preserves legitimate line-break separators while blocking markup injection.

#### Maintenance note

If the table renderer ever gains richer separator semantics, keep the whitelist explicit. Do not expand the allowed HTML surface casually.