{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/semantic-mediawiki-3.0.0-before-7.3.1/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7.1,"id":"CVE-2026-116880"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Semantic MediaWiki (3.0.0 before 7.3.1)"],"_cs_severities":["medium"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eSemantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site request forgery (CSRF) vulnerability in Special:SMWAdmin. The vulnerability occurs because the application overwrites the wpEditToken with a freshly generated valid token. An attacker can lure an authenticated smw-admin user to a malicious page that triggers schema setup, entity-disposal, or job actions, potentially resulting in semantic data loss and resource exhaustion.\u003c/p\u003e\n","date_modified":"2026-10-27T11:46:42Z","date_published":"2026-10-27T11:46:42Z","id":"https://feed.craftedsignal.io/briefs/2026-10-semantic-mediawiki-csrf/","summary":"Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site request forgery vulnerability in Special:SMWAdmin, allowing an attacker to trigger unauthorized administrative actions.","title":"Semantic MediaWiki: Cross-site request forgery in Special:SMWAdmin (CVE-2026-116880)","url":"https://feed.craftedsignal.io/briefs/2026-10-semantic-mediawiki-csrf/"}],"language":"en","title":"CraftedSignal Threat Feed - Semantic MediaWiki (3.0.0 Before 7.3.1)","version":"https://jsonfeed.org/version/1.1"}