YYesWiki

Products

Exploited and recent CVEs

• CVE-2026-116828 Medium 4.9 YesWiki before 4.7.0 SQL Injection via despam.php INTERVAL operand 0.2%
• CVE-2026-116827 Medium 6.8 YesWiki before 4.7.0 SSRF via copyUrlToLocalFile in Bazar CSV Import 0.3%
• CVE-2026-116826 Medium 6.8 YesWiki before 4.7.0 Authenticated SSRF via Page Duplication API downloadFile 0.2%
• CVE-2026-116825 Medium 6.5 YesWiki from 4.6.2 before 4.7.0 HTTP Signature Replay via ActivityPub Inbox 0.2%
• CVE-2026-116824 Medium 6.1 YesWiki before 4.7.0 Stored XSS via Referer Header in referrers_sites Handler 0.2%
• CVE-2026-116823 Medium 6.1 YesWiki before 4.7.0 Reflected XSS via BazarField $_REQUEST Fallback 0.2%
• CVE-2026-116822 Medium 5.3 YesWiki before 4.7.0 Template Traversal via BazarListeAction template Parameter 0.2%
• CVE-2026-116821 Medium 6.5 YesWiki before 4.7.0 Read-ACL Bypass via SQL LIKE Wildcards in Usernames 0.3%
• CVE-2026-116820 Medium 5.3 YesWiki from 4.6.0 before 4.7.0 SQL Query Disclosure via showreq Parameter 0.2%
• CVE-2026-116211 High 8.2 YesWiki 4.5.0 before 4.7.0 SQL Injection via date_maj_fiche in Bazar entry create 0.3%
• CVE-2026-116208 High 8.1 YesWiki 4.6.2 before 4.7.0 Missing Authorization in ActivityPub syncActorPosts 0.2%
• CVE-2026-116207 Critical 9.1 YesWiki 4.6.0 before 4.7.0 SQL Injection via Bazar Entries Search API 0.3%
• CVE-2026-116206 Medium 6.4 YesWiki 4.2.0 before 4.7.0 Stored XSS via Comment Raw-HTML Syntax 0.2%
• CVE-2026-116205 Medium 5.3 YesWiki before 4.7.0 Unauthenticated SSRF via [[|URL]] Raw-Inclusion Syntax 0.5%
• CVE-2026-116204 High 8.1 YesWiki before 4.7.0 CSRF via despam Admin Action 0.1%
• CVE-2026-116203 Medium 6.1 YesWiki before 4.7.0 Stored XSS via filtertags Action Parameters 0.2%
• CVE-2026-116202 Medium 5.4 YesWiki before 4.7.0 Stored XSS via ImageField SVG Upload 0.1%
• CVE-2026-105224 Medium 5.4 YesWiki before 4.6.7 Stored XSS via Bazar valeur Action 0.2%
• CVE-2026-104473 Medium 6.1 YesWiki before 4.5.3 Multiple Reflected XSS via BazaR and listpages 0.2%
• CVE-2026-104472 High 7.5 YesWiki before 4.6.7 Missing Authorization via Attachment Download Handler 0.3%
• CVE-2026-104471 High 7.2 YesWiki before 4.6.7 Unrestricted File Upload via Bazar CSV Import 0.4%
• CVE-2026-104470 Medium 5.0 YesWiki before 4.6.7 SSRF via Bazar valeur Action url Parameter 0.2%
• CVE-2026-104469 Medium 6.8 YesWiki before 4.6.7 Session Fixation via Login in AuthController.php 0.3%
• CVE-2026-104468 Medium 4.8 YesWiki before 4.6.7 Non-Expiring Password Reset Tokens via LostPasswordAction 0.2%
• CVE-2026-104467 High 8.1 YesWiki before 4.6.7 Authorization Bypass via Public API Mode 0.4%
• CVE-2026-104466 Medium 5.4 YesWiki before 4.6.7 Stored XSS via Wakka Markdown Image src Attribute 0.2%
• CVE-2026-104465 Medium 6.1 YesWiki before 4.6.7 Reflected XSS via field Parameter in mail Handler 0.2%
• CVE-2026-104464 High 8.6 YesWiki before 4.6.7 SSRF via Bazar abonnements sync actor parameter 0.3%
• CVE-2026-104463 High 7.0 YesWiki before 4.6.7 Unauthenticated SSRF via ActivityPub Inbox 0.3%
• CVE-2026-104462 High 7.5 YesWiki before 4.6.7 SQL Injection via nuagetag tags parameter 0.3%