[MEDIUM] Semantic MediaWiki's Special:FacetedSearch cstate hidden inputs enable reflected XSS (residual of CVE-2025-10354)

PKSA-rt5h-3dwq-vdnx GHSA-9rcc-pmj8-ffhr

Affected package: mediawiki/semantic-media-wiki

Affected version: >=4.2.0,<=7.2.0

Reported by:
GitHub