Is CVE-2026-116885 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-116885?

CVE-2026-116885 has a CVSS v3 severity of MEDIUM (6.1).

Back

CVE-2026-116885

Description

Semantic MediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in the Special:SMWAdmin ID lookup that allows unauthenticated attackers to inject markup through the unescaped id parameter. Attackers can lure an smw-admin administrator into opening a crafted lookup link, bypassing the auto-satisfied edit-token check, to execute script and perform privileged actions in the administrator's session.