Composer mediawiki/semantic-media-wiki has 10 known advisories in the phpwarden feed. Feed 2026.10.29.4, updated 2026-10-29.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2022-48614 | Cross-site Scripting in Semantic MediaWiki | medium | 6.1 | <4.0.2 | 4.0.2 |
| CVE-2025-61682 | Semantic MediaWiki vulnerable to stored XSS through wikitext via improper use of non-reserved data attributes | high | 8.6 | >=3.1.0 and <7.0.0 | 7.0.0 |
| CVE-2026-77616 | Semantic MediaWiki affected by reflected XSS in `Special:Ask` via a forged cursor pagination token | medium | 6.1 | >=7.0.0 and <7.2.0 | 7.2.0 |
| CVE-2026-77607 | Semantic MediaWiki affected by Special:Ask table `sep` parameter reflected XSS | medium | 6.1 | <7.2.0 | 7.2.0 |
| CVE-2026-77608 | Semantic MediaWiki has reflected XSS in `Special:SearchByProperty` (`property` and `value` parameters) | medium | 6.1 | <7.2.0 | 7.2.0 |
| CVE-2026-77610 | Semantic MediaWiki has a query debug output XSS (`DebugFormatter`) | medium | 6.1 | <7.2.0 | 7.2.0 |
| CVE-2026-77609 | Semantic MediaWiki has an open redirect in Special:URIResolver | medium | 6.1 | <7.2.0 | 7.2.0 |
| CVE-2026-77606 | Semantic MediaWiki has reflected XSS in Special:Ask plain table headers | medium | 6.1 | <7.2.0 | 7.2.0 |
| CVE-2026-116890 | Semantic MediaWiki'a missing authorization in the smwtask API module allows unauthenticated access to admin-only maintenance tasks | high | 7.3 | >=3.0.0 and <7.3.0 | 7.3.0 |
| CVE-2026-116891 | Semantic MediaWiki's Special:FacetedSearch cstate hidden inputs enable reflected XSS (residual of CVE-2025-10354) | medium | 6.1 | >=4.2.0 and <7.2.1 | 7.2.1 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# PHP projects (recommended) composer require --dev phpwarden/phpwarden # then vendor/bin/phpwarden deps composer.lock # or, without Composer pipx install phpwarden && phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked