THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-cx86-7xwp-w9wf (medium) — Semantic MediaWiki affected by reflected XSS in `Special:Ask` via a forged cursor pagination token

[GHSA] GHSA-cx86-7xwp-w9wf (medium) — Semantic MediaWiki affected by reflected XSS in `Special:Ask` via a forged cursor pagination token

medgithub_advisoriesPublished 2026-09-18

GHSA-cx86-7xwp-w9wf Severity: medium CVE: CVE-2026-77616

Semantic MediaWiki affected by reflected XSS in `Special:Ask` via a forged cursor pagination token

## Reflected XSS via a forged cursor pagination token

#### Failure mode

`Special:Ask` accepts a `cursor` query parameter for keyset pagination (added in 7.0.0). The token is decoded by `CursorEncoder`, which is an **unsigned** base64url-enc

Indicators of compromise

CVE-2026-77616cve

Original source: https://github.com/advisories/GHSA-cx86-7xwp-w9wf