Yeswiki vulnerabilities
82 CVEs and advisories name Yeswiki as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-104461YesWiki before 4.6.7 Stored XSS via Unsanitized SVG Upload in Bazar FileField
- CVE-2026-104460YesWiki before 4.6.7 Unauthenticated Blind SQL Injection via newtextsearch
- CVE-2026-104459YesWiki before 4.6.7 SSRF via ActivityPub WebFinger actor_handle
- CVE-2026-104458YesWiki before 4.6.7 SSRF Guard Bypass via IPv6 Transition Addresses
- CVE-2026-104457YesWiki before 4.6.7 SQL Injection via filtertags filterN parameter
- CVE-2026-104456YesWiki before 4.6.7 Second-Order SQL Injection via ACL Username
- CVE-2026-104455YesWiki before 4.6.7 Read-ACL Bypass via recentchangesrssplus RSS Action
- CVE-2026-104454YesWiki before 4.6.7 ReDoS via wakka.php Edit-Preview Endpoint
- CVE-2026-104453YesWiki before 4.6.7 CSRF Tag Deletion via admintag Action
- CVE-2026-104452YesWiki before 4.6.7 CSRF Attachment Deletion via filemanager Handler
- CVE-2026-104451YesWiki before 4.6.7 CSRF Page Revision Restore via RevisionsHandler
- CVE-2026-104450YesWiki before 4.6.7 ACL Bypass and Stored XSS via pointimage Action
- CVE-2026-104449YesWiki before 4.6.7 Unauthenticated Page Overwrite via Bazar id_fiche
- CVE-2026-104448YesWiki before 4.6.7 CSRF Page Deletion via ajaxdeletepage Handler
- CVE-2026-104447YesWiki before 4.6.7 CSRF Package Deletion via autoupdate UpdateAction
- CVE-2026-104446YesWiki before 4.6.7 Unauthenticated Open Mail Relay via Contact Mail Handler
- CVE-2026-104445YesWiki before 4.6.7 Authentication Bypass via ActivityPub Inbox Actor Spoofing
- CVE-2026-104444YesWiki before 4.6.7 Authorization Bypass via Comments API editComment
- CVE-2026-104443YesWiki before 4.6.7 Scope Bypass via Triples Delete API
- CVE-2026-104442YesWiki before 4.6.7 Unauthenticated SSRF via syndication Action
- CVE-2026-104441YesWiki before 4.6.7 Unauthenticated SSRF via valeur Action
- CVE-2026-104440YesWiki before 4.6.7 Blind SSRF via bazarlist API idtypeannonce Parameter
- CVE-2026-104439YesWiki before 4.6.7 User Enumeration via Lost-Password Flow
- CVE-2026-104438YesWiki before 4.6.7 Information Disclosure via listpagestag and includepages Actions
- CVE-2026-52777YesWiki: Authenticated PHP Object Injection in BazarImportAction via unserialize
- CVE-2026-52775YesWiki Authenticated SQL Injection in ReactionManager
- CVE-2026-52774Reflected XSS via Unescaped `id` Parameter in Bazar Widget HTML Attributes in YesWiki
- CVE-2026-52773Reflected XSS via Unescaped Archived-Revision `time` Parameter in `handlers/page/show.php` in YesWiki
- CVE-2026-52772YesWiki: Bazar form-field templates still apply `|raw('html')` to `field.label` / `field.hint` in attribute and label-body contexts — stored XSS in form renders (sibling class of commit `e6b66aa`)
- CVE-2026-52771YesWiki: Second-Order SQL Injection in Page Delete API via Unescaped Page Tag (`ApiController::deletePage`)