YesWiki yeswiki

• CVE-2026-116828 Medium 4.9 YesWiki before 4.7.0 SQL Injection via despam.php INTERVAL operand 0.2%
• CVE-2026-116827 Medium 6.8 YesWiki before 4.7.0 SSRF via copyUrlToLocalFile in Bazar CSV Import 0.3%
• CVE-2026-116826 Medium 6.8 YesWiki before 4.7.0 Authenticated SSRF via Page Duplication API downloadFile 0.2%
• CVE-2026-116825 Medium 6.5 YesWiki from 4.6.2 before 4.7.0 HTTP Signature Replay via ActivityPub Inbox 0.2%
• CVE-2026-116824 Medium 6.1 YesWiki before 4.7.0 Stored XSS via Referer Header in referrers_sites Handler 0.2%
• CVE-2026-116823 Medium 6.1 YesWiki before 4.7.0 Reflected XSS via BazarField $_REQUEST Fallback 0.2%
• CVE-2026-116822 Medium 5.3 YesWiki before 4.7.0 Template Traversal via BazarListeAction template Parameter 0.2%
• CVE-2026-116821 Medium 6.5 YesWiki before 4.7.0 Read-ACL Bypass via SQL LIKE Wildcards in Usernames 0.3%
• CVE-2026-116820 Medium 5.3 YesWiki from 4.6.0 before 4.7.0 SQL Query Disclosure via showreq Parameter 0.2%
• CVE-2026-116211 High 8.2 YesWiki 4.5.0 before 4.7.0 SQL Injection via date_maj_fiche in Bazar entry create 0.3%
• CVE-2026-116208 High 8.1 YesWiki 4.6.2 before 4.7.0 Missing Authorization in ActivityPub syncActorPosts 0.2%
• CVE-2026-116207 Critical 9.1 YesWiki 4.6.0 before 4.7.0 SQL Injection via Bazar Entries Search API 0.3%
• CVE-2026-116206 Medium 6.4 YesWiki 4.2.0 before 4.7.0 Stored XSS via Comment Raw-HTML Syntax 0.2%
• CVE-2026-116205 Medium 5.3 YesWiki before 4.7.0 Unauthenticated SSRF via [[|URL]] Raw-Inclusion Syntax 0.5%
• CVE-2026-116204 High 8.1 YesWiki before 4.7.0 CSRF via despam Admin Action 0.1%
• CVE-2026-116203 Medium 6.1 YesWiki before 4.7.0 Stored XSS via filtertags Action Parameters 0.2%
• CVE-2026-116202 Medium 5.4 YesWiki before 4.7.0 Stored XSS via ImageField SVG Upload 0.1%
• CVE-2026-105224 Medium 5.4 YesWiki before 4.6.7 Stored XSS via Bazar valeur Action 0.2%
• CVE-2026-104473 Medium 6.1 YesWiki before 4.5.3 Multiple Reflected XSS via BazaR and listpages 0.2%
• CVE-2026-104472 High 7.5 YesWiki before 4.6.7 Missing Authorization via Attachment Download Handler 0.3%
• CVE-2026-104471 High 7.2 YesWiki before 4.6.7 Unrestricted File Upload via Bazar CSV Import 0.4%
• CVE-2026-104470 Medium 5.0 YesWiki before 4.6.7 SSRF via Bazar valeur Action url Parameter 0.2%
• CVE-2026-104469 Medium 6.8 YesWiki before 4.6.7 Session Fixation via Login in AuthController.php 0.3%
• CVE-2026-104468 Medium 4.8 YesWiki before 4.6.7 Non-Expiring Password Reset Tokens via LostPasswordAction 0.2%
• CVE-2026-104467 High 8.1 YesWiki before 4.6.7 Authorization Bypass via Public API Mode 0.4%
• CVE-2026-104466 Medium 5.4 YesWiki before 4.6.7 Stored XSS via Wakka Markdown Image src Attribute 0.2%
• CVE-2026-104465 Medium 6.1 YesWiki before 4.6.7 Reflected XSS via field Parameter in mail Handler 0.2%
• CVE-2026-104464 High 8.6 YesWiki before 4.6.7 SSRF via Bazar abonnements sync actor parameter 0.3%
• CVE-2026-104463 High 7.0 YesWiki before 4.6.7 Unauthenticated SSRF via ActivityPub Inbox 0.3%
• CVE-2026-104462 High 7.5 YesWiki before 4.6.7 SQL Injection via nuagetag tags parameter 0.3%
• CVE-2026-104461 Medium 5.4 YesWiki before 4.6.7 Stored XSS via Unsanitized SVG Upload in Bazar FileField 0.2%
• CVE-2026-104460 High 7.5 YesWiki before 4.6.7 Unauthenticated Blind SQL Injection via newtextsearch 0.4%
• CVE-2026-104459 Medium 6.5 YesWiki before 4.6.7 SSRF via ActivityPub WebFinger actor_handle 0.4%
• CVE-2026-104458 Medium 6.5 YesWiki before 4.6.7 SSRF Guard Bypass via IPv6 Transition Addresses 0.3%
• CVE-2026-104457 High 8.6 YesWiki before 4.6.7 SQL Injection via filtertags filterN parameter 0.4%
• CVE-2026-104456 High 7.6 YesWiki before 4.6.7 Second-Order SQL Injection via ACL Username 0.3%
• CVE-2026-104455 Medium 5.3 YesWiki before 4.6.7 Read-ACL Bypass via recentchangesrssplus RSS Action 0.4%
• CVE-2026-104454 Medium 5.3 YesWiki before 4.6.7 ReDoS via wakka.php Edit-Preview Endpoint 0.4%
• CVE-2026-104453 Medium 5.4 YesWiki before 4.6.7 CSRF Tag Deletion via admintag Action 0.1%
• CVE-2026-104452 Medium 5.4 YesWiki before 4.6.7 CSRF Attachment Deletion via filemanager Handler 0.1%
• CVE-2026-104451 Medium 4.3 YesWiki before 4.6.7 CSRF Page Revision Restore via RevisionsHandler 0.1%
• CVE-2026-104450 Medium 6.5 YesWiki before 4.6.7 ACL Bypass and Stored XSS via pointimage Action 0.3%
• CVE-2026-104449 Medium 6.5 YesWiki before 4.6.7 Unauthenticated Page Overwrite via Bazar id_fiche 0.3%
• CVE-2026-104448 High 8.1 YesWiki before 4.6.7 CSRF Page Deletion via ajaxdeletepage Handler 0.2%
• CVE-2026-104447 High 7.1 YesWiki before 4.6.7 CSRF Package Deletion via autoupdate UpdateAction 0.1%
• CVE-2026-104446 Medium 6.5 YesWiki before 4.6.7 Unauthenticated Open Mail Relay via Contact Mail Handler 0.4%
• CVE-2026-104445 High 8.2 YesWiki before 4.6.7 Authentication Bypass via ActivityPub Inbox Actor Spoofing 0.4%
• CVE-2026-104444 High 7.1 YesWiki before 4.6.7 Authorization Bypass via Comments API editComment 0.3%
• CVE-2026-104443 High 8.1 YesWiki before 4.6.7 Scope Bypass via Triples Delete API 0.4%
• CVE-2026-104442 Medium 5.8 YesWiki before 4.6.7 Unauthenticated SSRF via syndication Action 0.3%