Vulnerabilities in YesWiki
15 resultsCVE-2025-31131HIGHPath Traversal allowing arbitrary read of files in YeswikiEPSS 5.4%CVE-2025-46347MEDIUMYesWiki Remote Code Execution via Arbitrary PHP File Write and ExecutionEPSS 0.8%CVE-2025-46349HIGHYesWiki Vulnerable to Unauthenticated Reflected Cross-site ScriptingEPSS 0.6%CVE-2025-46348CRITICALYesWiki Vulnerable to Unauthenticated Site Backup Creation and DownloadEPSS 0.6%CVE-2025-24019HIGHYesWiki vulnerable to authenticated arbitrary file deletionEPSS 0.6%CVE-2026-52778CRITICALYesWiki has Unsafe eval() in Formula Calculator - Remote Code Execution (RCE) & Denial of Service (DoS)EPSS 0.6%CVE-2025-46549MEDIUMYeswiki Vulnerable to Unauthenticated Reflected Cross-site ScriptingEPSS 0.5%CVE-2025-46550MEDIUMYeswiki Vulnerable to Unauthenticated Reflected Cross-site ScriptingEPSS 0.5%CVE-2025-24018HIGHYesWiki Vulnerable to Authenticated Stored XSSEPSS 0.4%CVE-2024-51478CRITICALUse of a Broken or Risky Cryptographic Algorithm in YesWikiEPSS 0.4%CVE-2026-41143HIGHYesWiki vulnerable to authenticated SQL Injection via id_fiche in EntryManager::formatDataBeforeSave()EPSS 0.3%CVE-2025-24017HIGHYesWiki Vulnerable to Unauthenticated DOM Based XSSEPSS 0.3%CVE-2025-46346MEDIUMYesWiki Vulnerable to Stored XSS in CommentsEPSS 0.3%CVE-2025-46350LOWYeswiki Vulnerable to Authenticated Reflected Cross-site ScriptingEPSS 0.2%CVE-2026-34598HIGHYesWiki has Persistant Blind XSS at "/?BazaR&vue=consulter"EPSS 0.2%