CVE-2026-126567 | Semantic MediaWiki up to 7.4.0 ElasticStore native_result/score_set cross site scripting

November 11, 2026 Yanac

A vulnerability labeled as problematic has been found in Semantic MediaWiki up to 7.4.0. Affected by this vulnerability is an unknown functionality of the component ElasticStore. Such manipulation of the argument native_result/score_set leads to cross site scripting.

This vulnerability is listed as CVE-2026-126567. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More