Vulnerabilidades en YesWiki
65 resultadosCVE-2025-31131HIGHPath Traversal allowing arbitrary read of files in YeswikiEPSS 5.5%CVE-2026-46670CRITICALYesWiki: Unauthenticated SQL InjectionEPSS 2.0%CVE-2025-46347MEDIUMYesWiki Remote Code Execution via Arbitrary PHP File Write and ExecutionEPSS 1.0%CVE-2026-52778CRITICALYesWiki has Unsafe eval() in Formula Calculator - Remote Code Execution (RCE) & Denial of Service (DoS)EPSS 0.8%CVE-2026-52762HIGHYesWiki: Authenticated (Admin) Server-Side Template Injection to Remote Code Execution via Bazar Semantic TemplatesEPSS 0.8%CVE-2026-52774MEDIUMReflected XSS via Unescaped `id` Parameter in Bazar Widget HTML Attributes in YesWikiEPSS 0.7%CVE-2025-46348CRITICALYesWiki Vulnerable to Unauthenticated Site Backup Creation and DownloadEPSS 0.7%CVE-2025-46349HIGHYesWiki Vulnerable to Unauthenticated Reflected Cross-site ScriptingEPSS 0.6%CVE-2026-52773MEDIUMReflected XSS via Unescaped Archived-Revision `time` Parameter in `handlers/page/show.php` in YesWikiEPSS 0.6%CVE-2025-24019HIGHYesWiki vulnerable to authenticated arbitrary file deletionEPSS 0.6%CVE-2026-52766CRITICALYesWiki: Unauthenticated arbitrary page deletion via `{{erasespamedcomments}}` actionEPSS 0.6%CVE-2025-46549MEDIUMYeswiki Vulnerable to Unauthenticated Reflected Cross-site ScriptingEPSS 0.5%CVE-2025-46550MEDIUMYeswiki Vulnerable to Unauthenticated Reflected Cross-site ScriptingEPSS 0.5%CVE-2026-52771HIGHYesWiki: Second-Order SQL Injection in Page Delete API via Unescaped Page Tag (`ApiController::deletePage`)EPSS 0.5%CVE-2026-52769HIGHYesWiki: Unauthenticated Server-Side Request Forgery via ActivityPub `Signature.keyId`EPSS 0.5%CVE-2026-52775HIGHYesWiki Authenticated SQL Injection in ReactionManagerEPSS 0.5%CVE-2026-52770HIGHImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in yeswiki/yeswikiEPSS 0.5%CVE-2026-41143HIGHYesWiki vulnerable to authenticated SQL Injection via id_fiche in EntryManager::formatDataBeforeSave()EPSS 0.5%CVE-2026-104446MEDIUMYesWiki before 4.6.7 Unauthenticated Open Mail Relay via Contact Mail HandlerEPSS 0.4%CVE-2025-24018HIGHYesWiki Vulnerable to Authenticated Stored XSSEPSS 0.4%