# cve.now: Yeswiki

The newest entries naming Yeswiki as an affected vendor (up to 200), of 82 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-116828](https://cve.now/CVE-2026-116828.md): YesWiki before 4.7.0 SQL Injection via despam.php INTERVAL operand (CVSS 6.9)
- [CVE-2026-116827](https://cve.now/CVE-2026-116827.md): YesWiki before 4.7.0 SSRF via copyUrlToLocalFile in Bazar CSV Import (CVSS 8.2)
- [CVE-2026-116826](https://cve.now/CVE-2026-116826.md): YesWiki before 4.7.0 Authenticated SSRF via Page Duplication API downloadFile (CVSS 8.2)
- [CVE-2026-116825](https://cve.now/CVE-2026-116825.md): YesWiki from 4.6.2 before 4.7.0 HTTP Signature Replay via ActivityPub Inbox (CVSS 8.3)
- [CVE-2026-116824](https://cve.now/CVE-2026-116824.md): YesWiki before 4.7.0 Stored XSS via Referer Header in referrers\_sites Handler (CVSS 5.3)
- [CVE-2026-116823](https://cve.now/CVE-2026-116823.md): YesWiki before 4.7.0 Reflected XSS via BazarField $\_REQUEST Fallback (CVSS 5.3)
- [CVE-2026-116822](https://cve.now/CVE-2026-116822.md): YesWiki before 4.7.0 Template Traversal via BazarListeAction template Parameter (CVSS 6.9)
- [CVE-2026-116821](https://cve.now/CVE-2026-116821.md): YesWiki before 4.7.0 Read-ACL Bypass via SQL LIKE Wildcards in Usernames (CVSS 7.1)
- [CVE-2026-116820](https://cve.now/CVE-2026-116820.md): YesWiki from 4.6.0 before 4.7.0 SQL Query Disclosure via showreq Parameter (CVSS 6.9)
- [CVE-2026-116211](https://cve.now/CVE-2026-116211.md): YesWiki 4.5.0 before 4.7.0 SQL Injection via date\_maj\_fiche in Bazar entry create (CVSS 8.8)
- [CVE-2026-116208](https://cve.now/CVE-2026-116208.md): YesWiki 4.6.2 before 4.7.0 Missing Authorization in ActivityPub syncActorPosts (CVSS 7.2)
- [CVE-2026-116207](https://cve.now/CVE-2026-116207.md): YesWiki 4.6.0 before 4.7.0 SQL Injection via Bazar Entries Search API (CVSS 8.8)
- [CVE-2026-116206](https://cve.now/CVE-2026-116206.md): YesWiki 4.2.0 before 4.7.0 Stored XSS via Comment Raw-HTML Syntax (CVSS 5.3)
- [CVE-2026-116205](https://cve.now/CVE-2026-116205.md): YesWiki before 4.7.0 Unauthenticated SSRF via \[\[|URL\]\] Raw-Inclusion Syntax (CVSS 6.9)
- [CVE-2026-116204](https://cve.now/CVE-2026-116204.md): YesWiki before 4.7.0 CSRF via despam Admin Action (CVSS 7.2)
- [CVE-2026-116203](https://cve.now/CVE-2026-116203.md): YesWiki before 4.7.0 Stored XSS via filtertags Action Parameters (CVSS 5.3)
- [CVE-2026-116202](https://cve.now/CVE-2026-116202.md): YesWiki before 4.7.0 Stored XSS via ImageField SVG Upload (CVSS 5.1)
- [CVE-2026-105224](https://cve.now/CVE-2026-105224.md): YesWiki before 4.6.7 Stored XSS via Bazar valeur Action (CVSS 5.1)
- [CVE-2026-104473](https://cve.now/CVE-2026-104473.md): YesWiki before 4.5.3 Multiple Reflected XSS via BazaR and listpages (CVSS 5.1)
- [CVE-2026-104472](https://cve.now/CVE-2026-104472.md): YesWiki before 4.6.7 Missing Authorization via Attachment Download Handler (CVSS 8.7)
- [CVE-2026-104471](https://cve.now/CVE-2026-104471.md): YesWiki before 4.6.7 Unrestricted File Upload via Bazar CSV Import (CVSS 8.6)
- [CVE-2026-104470](https://cve.now/CVE-2026-104470.md): YesWiki before 4.6.7 SSRF via Bazar valeur Action url Parameter (CVSS 5.3)
- [CVE-2026-104469](https://cve.now/CVE-2026-104469.md): YesWiki before 4.6.7 Session Fixation via Login in AuthController.php (CVSS 7.6)
- [CVE-2026-104468](https://cve.now/CVE-2026-104468.md): YesWiki before 4.6.7 Non-Expiring Password Reset Tokens via LostPasswordAction (CVSS 6.3)
- [CVE-2026-104467](https://cve.now/CVE-2026-104467.md): YesWiki before 4.6.7 Authorization Bypass via Public API Mode (CVSS 9.2)
- [CVE-2026-104466](https://cve.now/CVE-2026-104466.md): YesWiki before 4.6.7 Stored XSS via Wakka Markdown Image src Attribute (CVSS 5.1)
- [CVE-2026-104465](https://cve.now/CVE-2026-104465.md): YesWiki before 4.6.7 Reflected XSS via field Parameter in mail Handler (CVSS 5.1)
- [CVE-2026-104464](https://cve.now/CVE-2026-104464.md): YesWiki before 4.6.7 SSRF via Bazar abonnements sync actor parameter (CVSS 8.8)
- [CVE-2026-104463](https://cve.now/CVE-2026-104463.md): YesWiki before 4.6.7 Unauthenticated SSRF via ActivityPub Inbox (CVSS 8.3)
- [CVE-2026-104462](https://cve.now/CVE-2026-104462.md): YesWiki before 4.6.7 SQL Injection via nuagetag tags parameter (CVSS 8.8)
- [CVE-2026-104461](https://cve.now/CVE-2026-104461.md): YesWiki before 4.6.7 Stored XSS via Unsanitized SVG Upload in Bazar FileField (CVSS 5.1)
- [CVE-2026-104460](https://cve.now/CVE-2026-104460.md): YesWiki before 4.6.7 Unauthenticated Blind SQL Injection via newtextsearch (CVSS 8.7)
- [CVE-2026-104459](https://cve.now/CVE-2026-104459.md): YesWiki before 4.6.7 SSRF via ActivityPub WebFinger actor\_handle (CVSS 6.9)
- [CVE-2026-104458](https://cve.now/CVE-2026-104458.md): YesWiki before 4.6.7 SSRF Guard Bypass via IPv6 Transition Addresses (CVSS 8.3)
- [CVE-2026-104457](https://cve.now/CVE-2026-104457.md): YesWiki before 4.6.7 SQL Injection via filtertags filterN parameter (CVSS 8.8)
- [CVE-2026-104456](https://cve.now/CVE-2026-104456.md): YesWiki before 4.6.7 Second-Order SQL Injection via ACL Username (CVSS 7.2)
- [CVE-2026-104455](https://cve.now/CVE-2026-104455.md): YesWiki before 4.6.7 Read-ACL Bypass via recentchangesrssplus RSS Action (CVSS 6.9)
- [CVE-2026-104454](https://cve.now/CVE-2026-104454.md): YesWiki before 4.6.7 ReDoS via wakka.php Edit-Preview Endpoint (CVSS 6.9)
- [CVE-2026-104453](https://cve.now/CVE-2026-104453.md): YesWiki before 4.6.7 CSRF Tag Deletion via admintag Action (CVSS 5.3)
- [CVE-2026-104452](https://cve.now/CVE-2026-104452.md): YesWiki before 4.6.7 CSRF Attachment Deletion via filemanager Handler (CVSS 5.3)
- [CVE-2026-104451](https://cve.now/CVE-2026-104451.md): YesWiki before 4.6.7 CSRF Page Revision Restore via RevisionsHandler (CVSS 5.3)
- [CVE-2026-104450](https://cve.now/CVE-2026-104450.md): YesWiki before 4.6.7 ACL Bypass and Stored XSS via pointimage Action (CVSS 8.2)
- [CVE-2026-104449](https://cve.now/CVE-2026-104449.md): YesWiki before 4.6.7 Unauthenticated Page Overwrite via Bazar id\_fiche (CVSS 8.3)
- [CVE-2026-104448](https://cve.now/CVE-2026-104448.md): YesWiki before 4.6.7 CSRF Page Deletion via ajaxdeletepage Handler (CVSS 7.2)
- [CVE-2026-104447](https://cve.now/CVE-2026-104447.md): YesWiki before 4.6.7 CSRF Package Deletion via autoupdate UpdateAction (CVSS 7.1)
- [CVE-2026-104446](https://cve.now/CVE-2026-104446.md): YesWiki before 4.6.7 Unauthenticated Open Mail Relay via Contact Mail Handler (CVSS 6.9)
- [CVE-2026-104445](https://cve.now/CVE-2026-104445.md): YesWiki before 4.6.7 Authentication Bypass via ActivityPub Inbox Actor Spoofing (CVSS 8.8)
- [CVE-2026-104444](https://cve.now/CVE-2026-104444.md): YesWiki before 4.6.7 Authorization Bypass via Comments API editComment (CVSS 7.1)
- [CVE-2026-104443](https://cve.now/CVE-2026-104443.md): YesWiki before 4.6.7 Scope Bypass via Triples Delete API (CVSS 7.2)
- [CVE-2026-104442](https://cve.now/CVE-2026-104442.md): YesWiki before 4.6.7 Unauthenticated SSRF via syndication Action (CVSS 6.9)
- [CVE-2026-104441](https://cve.now/CVE-2026-104441.md): YesWiki before 4.6.7 Unauthenticated SSRF via valeur Action (CVSS 6.9)
- [CVE-2026-104440](https://cve.now/CVE-2026-104440.md): YesWiki before 4.6.7 Blind SSRF via bazarlist API idtypeannonce Parameter (CVSS 6.9)
- [CVE-2026-104439](https://cve.now/CVE-2026-104439.md): YesWiki before 4.6.7 User Enumeration via Lost-Password Flow (CVSS 7.1)
- [CVE-2026-104438](https://cve.now/CVE-2026-104438.md): YesWiki before 4.6.7 Information Disclosure via listpagestag and includepages Actions (CVSS 8.7)
- [CVE-2026-52777](https://cve.now/CVE-2026-52777.md): YesWiki: Authenticated PHP Object Injection in BazarImportAction via unserialize (CVSS 9.4)
- [CVE-2026-52775](https://cve.now/CVE-2026-52775.md): YesWiki Authenticated SQL Injection in ReactionManager (CVSS 8.8)
- [CVE-2026-52774](https://cve.now/CVE-2026-52774.md): Reflected XSS via Unescaped \`id\` Parameter in Bazar Widget HTML Attributes in YesWiki (CVSS 6.1)
- [CVE-2026-52773](https://cve.now/CVE-2026-52773.md): Reflected XSS via Unescaped Archived-Revision \`time\` Parameter in \`handlers/page/show.php\` in YesWiki (CVSS 6.1)
- [CVE-2026-52772](https://cve.now/CVE-2026-52772.md): YesWiki: Bazar form-field templates still apply \`|raw('html')\` to \`field.label\` / \`field.hint\` in attribute and label-body contexts — stored XSS in form renders (sibling class of commit \`e6b66aa\`) (CVSS 5.5)
- [CVE-2026-52771](https://cve.now/CVE-2026-52771.md): YesWiki: Second-Order SQL Injection in Page Delete API via Unescaped Page Tag (\`ApiController::deletePage\`) (CVSS 8.3)
- [CVE-2026-52770](https://cve.now/CVE-2026-52770.md): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in yeswiki/yeswiki (CVSS 7.5)
- [CVE-2026-52769](https://cve.now/CVE-2026-52769.md): YesWiki: Unauthenticated Server-Side Request Forgery via ActivityPub \`Signature.keyId\` (CVSS 8.3)
- [CVE-2026-52767](https://cve.now/CVE-2026-52767.md): YesWiki: Unauthenticated ActivityPub Signature-Verification Bypass via \`!openssl\_verify(...)\` accepting \`int(-1)\` (CVSS 8.2)
- [CVE-2026-52766](https://cve.now/CVE-2026-52766.md): YesWiki: Unauthenticated arbitrary page deletion via \`{{erasespamedcomments}}\` action (CVSS 9.1)
- [CVE-2026-52763](https://cve.now/CVE-2026-52763.md): YesWiki: SQL injection via the \`recentchanges\` action \`period\` argument leading to arbitrary DB read (CVSS 6.5)
- [CVE-2026-52762](https://cve.now/CVE-2026-52762.md): YesWiki: Authenticated (Admin) Server-Side Template Injection to Remote Code Execution via Bazar Semantic Templates (CVSS 7.1)
- [CVE-2026-46670](https://cve.now/CVE-2026-46670.md): YesWiki: Unauthenticated SQL Injection (CVSS 9.8)
- [CVE-2026-52778](https://cve.now/CVE-2026-52778.md): YesWiki has Unsafe eval() in Formula Calculator - Remote Code Execution (RCE) & Denial of Service (DoS) (CVSS 9.8)
- [CVE-2026-41143](https://cve.now/CVE-2026-41143.md): YesWiki vulnerable to authenticated SQL Injection via id\_fiche in EntryManager::formatDataBeforeSave() (CVSS 8.8)
- [CVE-2026-34598](https://cve.now/CVE-2026-34598.md): YesWiki has Persistant Blind XSS at "/?BazaR&vue=consulter" (CVSS 7.1)
- [CVE-2025-46550](https://cve.now/CVE-2025-46550.md): Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting (CVSS 4.3)
- [CVE-2025-46549](https://cve.now/CVE-2025-46549.md): Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting (CVSS 4.3)
- [CVE-2025-46348](https://cve.now/CVE-2025-46348.md): YesWiki Vulnerable to Unauthenticated Site Backup Creation and Download (CVSS 10.0)
- [CVE-2025-46350](https://cve.now/CVE-2025-46350.md): Yeswiki Vulnerable to Authenticated Reflected Cross-site Scripting (CVSS 3.5)
- [CVE-2025-46349](https://cve.now/CVE-2025-46349.md): YesWiki Vulnerable to Unauthenticated Reflected Cross-site Scripting (CVSS 7.6)
- [CVE-2025-46347](https://cve.now/CVE-2025-46347.md): YesWiki Remote Code Execution via Arbitrary PHP File Write and Execution (CVSS 5.8)
- [CVE-2025-46346](https://cve.now/CVE-2025-46346.md): YesWiki Vulnerable to Stored XSS in Comments (CVSS 6.3)
- [CVE-2025-31131](https://cve.now/CVE-2025-31131.md): Path Traversal allowing arbitrary read of files in Yeswiki (CVSS 8.6)
- [CVE-2025-24019](https://cve.now/CVE-2025-24019.md): YesWiki vulnerable to authenticated arbitrary file deletion (CVSS 7.1)
- [CVE-2025-24018](https://cve.now/CVE-2025-24018.md): YesWiki Vulnerable to Authenticated Stored XSS (CVSS 7.6)
- [CVE-2025-24017](https://cve.now/CVE-2025-24017.md): YesWiki Vulnerable to Unauthenticated DOM Based XSS (CVSS 7.6)
- [CVE-2024-51478](https://cve.now/CVE-2024-51478.md): Use of a Broken or Risky Cryptographic Algorithm in YesWiki (CVSS 9.9)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/yeswiki
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.