CVE-2026-126563 | Semantic MediaWiki up to 7.4.0 TimeValueFormatter getCaptionFromFreeFormat cross site scripting

A vulnerability identified as problematic has been detected in Semantic MediaWiki up to 7.4.0. Affected is the function TimeValueFormatter::getCaptionFromFreeFormat of the component TimeValueFormatter. This manipulation causes cross site scripting.

This vulnerability is tracked as CVE-2026-126563. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More