---
id: CVE-2026-116882
title: >-
  Semantic MediaWiki 4.2.0 before 7.3.1 Stored XSS via FacetedSearch Exploration
  Labels
summary: >-
  Semantic MediaWiki from 4.2.0 before 7.3.1 contains a stored cross-site
  scripting vulnerability that allows authenticated profile or schema editors to
  inject HTML through FacetedSearch exploration-link labels. Attackers can store
  markup …
severity: medium
cvss: 4.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N'
cvssSource: cna
cwe:
  - CWE-79
vendor: SemanticMediaWiki
product: SemanticMediaWiki
affected:
  - SemanticMediaWiki >= 4.2.0 < 7.3.1
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-27T13:42:22.762371Z'
published: '2026-10-27'
updated: '2026-10-27'
sourceUpdated: '2026-10-27T14:13:13.223Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-116882'
references:
  - url: >-
      https://github.com/SemanticMediaWiki/SemanticMediaWiki/security/advisories/GHSA-3r5m-693w-jm33
    label: GitHub Security Advisory (GHSA-3r5m-693w-jm33)
  - url: >-
      https://www.vulncheck.com/advisories/semantic-mediawiki-4.2.0-before-7.3.1-stored-xss-via-facetedsearch-exploration-labels
    label: >-
      VulnCheck Advisory: Semantic MediaWiki 4.2.0 before 7.3.1 Stored XSS via
      FacetedSearch Exploration Labels
tags:
  - cve.org
ingestedAt: '2026-10-27T16:11:59.438Z'
---

## Overview

Semantic MediaWiki from 4.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticated profile or schema editors to inject HTML through FacetedSearch exploration-link labels. Attackers can store markup in the label, which ExploreListBuilder::buildHTML() passes unescaped to Html::rawElement(), altering the Special:FacetedSearch page and potentially running scripts in viewers' browsers.

## Affected

- `SemanticMediaWiki >= 4.2.0 < 7.3.1`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.