CVE-2022-48614: 
PHP vulnerability analysis and mitigation

A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in Semantic MediaWiki's Special:Ask feature, affecting versions before 4.0.2. The vulnerability was reported on June 10, 2022, and was subsequently addressed in the 4.0.2 release on July 21, 2022 (GitHub Issue, SMW Release).

The vulnerability was identified in the query log output functionality of Special:Ask, where unsanitized input could potentially lead to reflected XSS attacks. The issue was tracked as CVE-2022-48614 and was fixed by implementing proper sanitization of the query log before output (SMW Release).

The vulnerability could potentially allow attackers to execute malicious scripts in users' browsers through the Special:Ask feature, potentially leading to theft of sensitive information or unauthorized actions performed on behalf of the victim (GitHub Issue).

The vulnerability was patched in Semantic MediaWiki version 4.0.2. Users are strongly encouraged to upgrade to this version or later. The fix involves proper sanitization of query log output. The upgrade can be performed via Composer by updating the SMW version in composer.json to ^4.0.2 and running the composer update command (SMW Release).