Semantic MediaWiki versions 3.0.0 through 7.3.0 contain a cross‑site request forgery flaw in the Special:SMWAdmin page. The flaw allows an attacker to overwrite the wpEditToken with a freshly generated valid token, enabling a logged‑in smw‑admin user to trigger maintenance actions such as schema setup, entity disposal, or job processing without the user’s consent. This can result in the loss or corruption of semantic data and may lead to resource exhaustion. The issue is identified as a CSRF weakness (CWE‑352).

The vulnerability affects SemanticMediaWiki SemanticMediaWiki. All releases from version 3.0.0 up to and including 7.3.0 are susceptible; versions 7.3.1 and later contain the fix.

The CVSS score of 7.1 indicates moderate‑to‑high severity. EPSS data is not available, so the current exploitation probability is uncertain, but the flaw requires an authenticated smw‑admin user to be tricked into visiting a malicious page. Because the action is performed through a legitimate privileged user session, the risk of a successful exploit is significant for sites that expose the Special:SMWAdmin interface to the internet. The vulnerability is not listed in the CISA KEV catalog at present.