Executive brief
Semantic MediaWiki's Special:FacetedSearch cstate hidden inputs enable reflected XSS (residual of CVE-2025-10354)
Affected products
- Packagist mediawiki/semantic-media-wiki
Junglewise Threat Intelligence
Semantic MediaWiki's Special:FacetedSearch cstate hidden inputs enable reflected XSS (residual of )
Severity: low · CVSS 3.1 · Published 2026-09-18
Technologies: mediawiki/semantic-media-wiki (Packagist). Vendors: Packagist.
Related threats
- Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. In versions 7
- Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to vers
- Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to vers
- Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to vers
- Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to vers