YesWiki vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 202511
3. 202670

Newest CVEs

• CVE-2026-116828

  YesWiki before 4.7.0 SQL Injection via despam.php INTERVAL operand

  YesWiki · yeswiki

  Medium6.9
• CVE-2026-116827

  YesWiki before 4.7.0 SSRF via copyUrlToLocalFile in Bazar CSV Import

  YesWiki · yeswiki

  High8.2
• CVE-2026-116826

  YesWiki before 4.7.0 Authenticated SSRF via Page Duplication API downloadFile

  YesWiki · yeswiki

  High8.2
• CVE-2026-116825

  YesWiki from 4.6.2 before 4.7.0 HTTP Signature Replay via ActivityPub Inbox

  YesWiki · yeswiki

  High8.3
• CVE-2026-116824

  YesWiki before 4.7.0 Stored XSS via Referer Header in referrers_sites Handler

  YesWiki · yeswiki

  Medium5.3
• CVE-2026-116823

  YesWiki before 4.7.0 Reflected XSS via BazarField $_REQUEST Fallback

  YesWiki · yeswiki

  Medium5.3
• CVE-2026-116822

  YesWiki before 4.7.0 Template Traversal via BazarListeAction template Parameter

  YesWiki · yeswiki

  Medium6.9
• CVE-2026-116821

  YesWiki before 4.7.0 Read-ACL Bypass via SQL LIKE Wildcards in Usernames

  YesWiki · yeswiki

  High7.1
• CVE-2026-116820

  YesWiki from 4.6.0 before 4.7.0 SQL Query Disclosure via showreq Parameter

  YesWiki · yeswiki

  Medium6.9
• CVE-2026-116211

  YesWiki 4.5.0 before 4.7.0 SQL Injection via date_maj_fiche in Bazar entry create

  YesWiki · yeswiki

  High8.8