YesWiki Cross Site Scripting vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-52277 · ADVISORY
• YesWiki/yeswiki · PACKAGE
• nakkouchtarek/CVE · WEB
• yeswiki.com · WEB

yeswiki/yeswiki のその他の脆弱性

• CVE-2026-104473中 6.1YesWiki before 4.5.3 contains multiple reflected cross-site scripting vulnerabilities that allow remote attackers to inject JavaScript throu…
• CVE-2026-52777緊急 9.4YesWiki is a wiki system written in PHP. Prior to version 4.6.6, there is an authenticated PHP object injection vulnerability in BazarImport…
• CVE-2026-52775高 8.8YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki through the latest development branch contains a SQL injection vuln…
• CVE-2026-52774中 6.1YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki's Bazar widget handler reflects the id GET parameter into HTML attr…
• CVE-2026-52773中 6.1YesWiki is a wiki system written in PHP. From version 4.1.0 to before version 4.6.6, YesWiki's archived-revision view reflects the time GET …