Known Vulnerabilities for Yeswiki by YesWiki
Listed below are 4 of the newest known vulnerabilities associated with "Yeswiki" by "YesWiki".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-116828 json | YesWiki before 4.7.0 contains a sql injection vulnerability in despam.php where the from parameter is escaped but placed in a... | Not Provided | 2026-10-27 | 2026-10-31 |
| CVE-2026-116827 json | YesWiki before 4.7.0 contains a server-side request forgery vulnerability in the Bazar CSV import copyUrlToLocalFile() functi... | Not Provided | 2026-10-27 | 2026-11-03 |
| CVE-2026-116826 json | YesWiki before 4.7.0 contains a server-side request forgery vulnerability in DuplicationManager::downloadFile() that allows a... | Not Provided | 2026-10-27 | 2026-10-27 |
| CVE-2026-116825 json | YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService::verifySignature(), which never validates the... | Not Provided | 2026-10-27 | 2026-11-02 |
| CVE-2026-116824 json | YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in handlers/page/referrers_sites.php that allows un... | Not Provided | 2026-10-27 | 2026-10-31 |
| CVE-2026-116823 json | YesWiki before 4.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject ... | Not Provided | 2026-10-27 | 2026-11-03 |
| CVE-2026-116822 json | YesWiki before 4.7.0 contains a path traversal vulnerability in BazarListeAction that allows unauthenticated attackers to sel... | Not Provided | 2026-10-27 | 2026-10-27 |
| CVE-2026-116821 json | YesWiki before 4.7.0 contains a read-ACL bypass in AclService::updateRequestWithACL, which interpolates usernames into SQL LI... | Not Provided | 2026-10-27 | 2026-11-02 |
| CVE-2026-116820 json | YesWiki from 4.6.0 before 4.7.0 contains an information disclosure vulnerability that allows unauthenticated attackers to vie... | Not Provided | 2026-10-27 | 2026-10-31 |
| CVE-2026-116211 json | YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManager::save(), where the date_maj_fiche field of ... | Not Provided | 2026-10-25 | 2026-10-29 |