Vulnerabilities in YesWiki
65 resultsCVE-2026-104456HIGHYesWiki before 4.6.7 Second-Order SQL Injection via ACL UsernameEPSS 0.3%CVE-2026-104438HIGHYesWiki before 4.6.7 Information Disclosure via listpagestag and includepages ActionsEPSS 0.3%CVE-2026-104440MEDIUMYesWiki before 4.6.7 Blind SSRF via bazarlist API idtypeannonce ParameterEPSS 0.3%CVE-2026-104464HIGHYesWiki before 4.6.7 SSRF via Bazar abonnements sync actor parameterEPSS 0.3%CVE-2026-104441MEDIUMYesWiki before 4.6.7 Unauthenticated SSRF via valeur ActionEPSS 0.3%CVE-2025-46350LOWYeswiki Vulnerable to Authenticated Reflected Cross-site ScriptingEPSS 0.3%CVE-2026-104457HIGHYesWiki before 4.6.7 SQL Injection via filtertags filterN parameterEPSS 0.3%CVE-2026-104449HIGHYesWiki before 4.6.7 Unauthenticated Page Overwrite via Bazar id_ficheEPSS 0.3%CVE-2026-52777CRITICALYesWiki: Authenticated PHP Object Injection in BazarImportAction via unserializeEPSS 0.3%CVE-2026-104444HIGHYesWiki before 4.6.7 Authorization Bypass via Comments API editCommentEPSS 0.3%CVE-2026-104450HIGHYesWiki before 4.6.7 ACL Bypass and Stored XSS via pointimage ActionEPSS 0.3%CVE-2026-104463HIGHYesWiki before 4.6.7 Unauthenticated SSRF via ActivityPub InboxEPSS 0.3%CVE-2026-104468MEDIUMYesWiki before 4.6.7 Non-Expiring Password Reset Tokens via LostPasswordActionEPSS 0.3%CVE-2026-104470MEDIUMYesWiki before 4.6.7 SSRF via Bazar valeur Action url ParameterEPSS 0.2%CVE-2026-104469HIGHYesWiki before 4.6.7 Session Fixation via Login in AuthController.phpEPSS 0.2%CVE-2026-104473MEDIUMYesWiki before 4.5.3 Multiple Reflected XSS via BazaR and listpagesEPSS 0.2%CVE-2026-104466MEDIUMYesWiki before 4.6.7 Stored XSS via Wakka Markdown Image src AttributeEPSS 0.2%CVE-2026-104465MEDIUMYesWiki before 4.6.7 Reflected XSS via field Parameter in mail HandlerEPSS 0.2%CVE-2026-104461MEDIUMYesWiki before 4.6.7 Stored XSS via Unsanitized SVG Upload in Bazar FileFieldEPSS 0.2%CVE-2026-105224MEDIUMYesWiki before 4.6.7 Stored XSS via Bazar valeur ActionEPSS 0.2%