YesWiki Cross Site Scripting vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2025-52277 · ADVISORY
• YesWiki/yeswiki · PACKAGE
• nakkouchtarek/CVE · WEB
• yeswiki.com · WEB

Weitere Schwachstellen in yeswiki/yeswiki

• CVE-2026-104473MITTEL 6.1YesWiki before 4.5.3 contains multiple reflected cross-site scripting vulnerabilities that allow remote attackers to inject JavaScript throu…
• CVE-2026-52777KRITISCH 9.4YesWiki is a wiki system written in PHP. Prior to version 4.6.6, there is an authenticated PHP object injection vulnerability in BazarImport…
• CVE-2026-52775HOCH 8.8YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki through the latest development branch contains a SQL injection vuln…
• CVE-2026-52774MITTEL 6.1YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki's Bazar widget handler reflects the id GET parameter into HTML attr…
• CVE-2026-52773MITTEL 6.1YesWiki is a wiki system written in PHP. From version 4.1.0 to before version 4.6.6, YesWiki's archived-revision view reflects the time GET …