Cross-Site Scripting (XSS) vulnerability reflected in Semantic MediaWiki.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 21, 2026 · NIST NVD

   Detected

   Cross-Site Scripting (XSS) vulnerability reflected in Semantic MediaWiki. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL using the '/index.php/Speciaal:GefacetteerdZoeken' endpoint parameter. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user

2. Oct 14, 2026 · NIST NVD

   Updated

   Cross-Site Scripting (XSS) vulnerability reflected in Semantic MediaWiki. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL using the '/index.php/Speciaal:GefacetteerdZoeken' endpoint parameter. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user

Sources

• CVE.orgVulnerability recordCVE-2025-10354

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2025-10354

  30-day exploitation probability 0.3%

  first.org
• NIST NVDVulnerability recordCVE-2025-10354

  Cross-Site Scripting (XSS) vulnerability reflected in Semantic MediaWiki. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL using the '/index.php/Speciaal:GefacetteerdZoeken' endpoint parameter. This vulnerabi

  nvd.nist.gov

References

• Reference · incibe.es