YesWiki yeswiki vulnerabilities
82 published CVEs name YesWiki yeswiki among the affected products.
- 82Published CVEs82 of them scored
- 70Last 12 monthspublished in the last year
- 7Critical40 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-116828
YesWiki before 4.7.0 SQL Injection via despam.php INTERVAL operand
YesWiki · yeswiki
Medium6.9 - CVE-2026-116827
YesWiki before 4.7.0 SSRF via copyUrlToLocalFile in Bazar CSV Import
YesWiki · yeswiki
High8.2 - CVE-2026-116826
YesWiki before 4.7.0 Authenticated SSRF via Page Duplication API downloadFile
YesWiki · yeswiki
High8.2 - CVE-2026-116825
YesWiki from 4.6.2 before 4.7.0 HTTP Signature Replay via ActivityPub Inbox
YesWiki · yeswiki
High8.3 - CVE-2026-116824
YesWiki before 4.7.0 Stored XSS via Referer Header in referrers_sites Handler
YesWiki · yeswiki
Medium5.3 - CVE-2026-116823
YesWiki before 4.7.0 Reflected XSS via BazarField $_REQUEST Fallback
YesWiki · yeswiki
Medium5.3 - CVE-2026-116822
YesWiki before 4.7.0 Template Traversal via BazarListeAction template Parameter
YesWiki · yeswiki
Medium6.9 - CVE-2026-116821
YesWiki before 4.7.0 Read-ACL Bypass via SQL LIKE Wildcards in Usernames
YesWiki · yeswiki
High7.1 - CVE-2026-116820
YesWiki from 4.6.0 before 4.7.0 SQL Query Disclosure via showreq Parameter
YesWiki · yeswiki
Medium6.9 - CVE-2026-116211
YesWiki 4.5.0 before 4.7.0 SQL Injection via date_maj_fiche in Bazar entry create
YesWiki · yeswiki
High8.8