Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Sep 18, 2026 · NIST NVD

   Detected

   Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Versions starting in 3.1.0 and prior to 7.0.0 insert the unsanitized value of a data attribute into the DOM as HTML, allowing for stored XSS through wikitext. Version 7.0.0 patches the issue.

2. Oct 14, 2026 · NIST NVD

   Updated

   Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Versions starting in 3.1.0 and prior to 7.0.0 insert the unsanitized value of a data attribute into the DOM as HTML, allowing for stored XSS through wikitext. Version 7.0.0 patches the issue.

Sources

• CVE.orgVulnerability recordCVE-2025-61682

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2025-61682

  30-day exploitation probability 0.3%

  first.org
• NIST NVDVulnerability recordCVE-2025-61682

  Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Versions starting in 3.1.0 and prior to 7.0.0 insert the unsanitized value of a data attribute into the DOM as HTML, allowing for stored XSS through wiki

  nvd.nist.gov

References

• Reference · github.com
• Reference · github.com