YesWiki yeswiki

• CVE-2026-104441 Medium 5.3 YesWiki before 4.6.7 Unauthenticated SSRF via valeur Action 0.4%
• CVE-2026-104440 Medium 5.3 YesWiki before 4.6.7 Blind SSRF via bazarlist API idtypeannonce Parameter 0.3%
• CVE-2026-104439 Medium 5.3 YesWiki before 4.6.7 User Enumeration via Lost-Password Flow 0.3%
• CVE-2026-104438 Medium 5.3 YesWiki before 4.6.7 Information Disclosure via listpagestag and includepages Actions 0.3%
• CVE-2026-52777 Critical 9.4 YesWiki: Authenticated PHP Object Injection in BazarImportAction via unserialize 0.3%
• CVE-2026-52775 High 8.8 YesWiki Authenticated SQL Injection in ReactionManager 0.5%
• CVE-2026-52774 Medium 6.1 Reflected XSS via Unescaped `id` Parameter in Bazar Widget HTML Attributes in YesWiki 0.7%
• CVE-2026-52773 Medium 6.1 Reflected XSS via Unescaped Archived-Revision `time` Parameter in `handlers/page/show.php` in YesWiki 0.6%
• CVE-2026-52772 Medium 5.5 YesWiki: Bazar form-field templates still apply `|raw('html')` to `field.label` / `field.hint` in attribute and label-body contexts — stored XSS in form renders (sibling class of commit `e6b66aa`) 0.3%
• CVE-2026-52771 High 8.3 YesWiki: Second-Order SQL Injection in Page Delete API via Unescaped Page Tag (`ApiController::deletePage`) 0.5%
• CVE-2026-52770 High 7.5 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in yeswiki/yeswiki 0.5%
• CVE-2026-52769 High 8.3 YesWiki: Unauthenticated Server-Side Request Forgery via ActivityPub `Signature.keyId` 0.5%
• CVE-2026-52767 High 8.2 YesWiki: Unauthenticated ActivityPub Signature-Verification Bypass via `!openssl_verify(...)` accepting `int(-1)` 0.4%
• CVE-2026-52766 Critical 9.1 YesWiki: Unauthenticated arbitrary page deletion via `{{erasespamedcomments}}` action 0.6%
• CVE-2026-52763 Medium 6.5 YesWiki: SQL injection via the `recentchanges` action `period` argument leading to arbitrary DB read 0.4%
• CVE-2026-52762 High 7.1 YesWiki: Authenticated (Admin) Server-Side Template Injection to Remote Code Execution via Bazar Semantic Templates 0.8%
• CVE-2026-46670 Critical 9.8 YesWiki: Unauthenticated SQL Injection 2.0%
• CVE-2026-52778 Critical 9.8 YesWiki has Unsafe eval() in Formula Calculator - Remote Code Execution (RCE) & Denial of Service (DoS) 0.8%
• CVE-2026-41143 High 8.8 YesWiki vulnerable to authenticated SQL Injection via id_fiche in EntryManager::formatDataBeforeSave() 0.3%
• CVE-2026-34598 High 7.1 YesWiki has Persistant Blind XSS at "/?BazaR&vue=consulter" 0.2%
• CVE-2025-46550 Medium 4.3 Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting 0.6%
• CVE-2025-46549 Medium 4.3 Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting 0.6%
• CVE-2025-46348 Critical 10.0 YesWiki Vulnerable to Unauthenticated Site Backup Creation and Download 0.7%
• CVE-2025-46350 Low 3.5 Yeswiki Vulnerable to Authenticated Reflected Cross-site Scripting 0.3%
• CVE-2025-46349 High 7.6 YesWiki Vulnerable to Unauthenticated Reflected Cross-site Scripting 0.6%
• CVE-2025-46347 Medium 5.8 YesWiki Remote Code Execution via Arbitrary PHP File Write and Execution 1.0%
• CVE-2025-46346 Medium 6.3 YesWiki Vulnerable to Stored XSS in Comments 0.4%
• CVE-2025-31131 High 8.6 Path Traversal allowing arbitrary read of files in Yeswiki 5.6%
• CVE-2025-24019 High 7.1 YesWiki vulnerable to authenticated arbitrary file deletion 0.6%
• CVE-2025-24018 High 7.6 YesWiki Vulnerable to Authenticated Stored XSS 0.4%
• CVE-2025-24017 High 7.6 YesWiki Vulnerable to Unauthenticated DOM Based XSS 0.4%
• CVE-2024-51478 Critical 9.9 Use of a Broken or Risky Cryptographic Algorithm in YesWiki 0.4%