YesWiki Cross Site Scripting vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2025-52277 · ADVISORY
• YesWiki/yeswiki · PACKAGE
• nakkouchtarek/CVE · WEB
• yeswiki.com · WEB

Mais vulnerabilidades de yeswiki/yeswiki

• CVE-2026-104473MÉDIO 6.1YesWiki before 4.5.3 contains multiple reflected cross-site scripting vulnerabilities that allow remote attackers to inject JavaScript throu…
• CVE-2026-52777CRÍTICO 9.4YesWiki is a wiki system written in PHP. Prior to version 4.6.6, there is an authenticated PHP object injection vulnerability in BazarImport…
• CVE-2026-52775ALTO 8.8YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki through the latest development branch contains a SQL injection vuln…
• CVE-2026-52774MÉDIO 6.1YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki's Bazar widget handler reflects the id GET parameter into HTML attr…
• CVE-2026-52773MÉDIO 6.1YesWiki is a wiki system written in PHP. From version 4.1.0 to before version 4.6.6, YesWiki's archived-revision view reflects the time GET …