VulnSocial

CVE-2025-10354Disclosure

LOWCVSS 5.1 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Cross-Site Scripting (XSS) vulnerability reflected in Semantic MediaWiki. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL using the '/index.php/Speciaal:GefacetteerdZoeken' endpoint parameter. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 4 signals
  • Disclosure: 4 classified signals
  • Peaked 1d ago at 3 mentions (2026-04-21); latest day: 1
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-04-21: 3Mentions · 2026-09-18: 1Technical Details · 2026-04-21: 3Technical Details · 2026-09-18: 104-2109-18
Signal classification1 categories
Disclosure
4100.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-04-213
Disclosure3
2026-09-181
Disclosure1
Full discourse4 posts
  • INCIBE-CERT@incibe_cert
    Disclosure

    ⚠️#INCIBEaviso | Cross-Site Scripting (XSS) reflejado en #SemanticMediaWiki #CVE CVE-2025-10354 https://www.incibe.es/incibe-cert/alerta-temprana/avisos/cross-site-scripting-xss-reflejado-en-semantic-mediawiki #AvisosDeSeguridad #TI #CNA #0day

    Post summary

    The tweet announces a reflected XSS vulnerability (CVE‑2025‑10354) in Semantic MediaWiki, with no evidence of active exploitation, PoC, or patch details provided.

    01010506
    42.7K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2025-10354 Cross-Site Scripting (XSS) vulnerability reflected in Semantic MediaWiki. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by … https://www.cve.org/CVERecord?id=CVE-2025-10354

    Post summary

    CVE‑2025‑10354 describes a reflected XSS flaw in Semantic MediaWiki that permits JavaScript execution in a victim's browser, but no PoC, exploit, patch, or active usage details are included.

    00010189
    57.2K followersView on X
  • DailyCVE@dailycve
    Disclosure

    🟠 Semantic MediaWiki, Reflected XSS, #CVE-2025-10354 (Medium) -DC-Sep2026-2482 https://dailycve.com/semantic-mediawiki-reflected-xss-cve-2025-10354-medium-dc-sep2026-2482/

    Post summary

    The tweet announces a Reflected XSS vulnerability (CVE-2025-10354) in Semantic MediaWiki with Medium severity, providing key technical details but lacking information on active exploitation, PoCs, or remediation steps.

    0000039
    237 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2025-10354 Cross-Site Scripting (XSS) vulnerability reflected in Semantic MediaWiki. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by … https://www.cve.org/CVERecord?id=CVE-2025-10354 ----- Traducción: CVE-2025-10354 Vul… http://infoflow.cloud`

    Post summary

    The post announces a new reflected XSS vulnerability (CVE‑2025‑10354) in Semantic MediaWiki that enables client‑side JavaScript execution, but offers no details on exploits, patches, or active use.

    00000206
    72 followersView on X

Explore more

Back to dashboard