TI-2025-29089 CVE-2025-46348 · GHSA-wc9g-6j9w-hr95
YesWiki Vulnerable to Unauthenticated Site Backup Creation and Download
Priority HIGH 82
YesWiki is a wiki system written in PHP.
YesWiki
Records86All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high41CVSS 7.0–8.9
Exploited now
YesWiki records in CISA KEVNo YesWiki vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
16 records in Yeswiki · all components
TI-2024-34399 CVE-2024-51478 · GHSA-4fvx-h823-38v3
Use of a Broken or Risky Cryptographic Algorithm in YesWiki
Priority HIGH 82
YesWiki is a wiki system written in PHP.
TI-2025-22392 CVE-2025-31131 · GHSA-w34w-fvp3-68xm
Path Traversal allowing arbitrary read of files in Yeswiki
Priority HIGH 76
YesWiki is a wiki system written in PHP.
TI-2025-17784 CVE-2025-24017 · GHSA-wphc-5f2j-jhvg
YesWiki Vulnerable to Unauthenticated DOM Based XSS
Priority HIGH 68
YesWiki is a wiki system written in PHP.
TI-2025-29087 CVE-2025-46346 · GHSA-59x8-cvxh-3mm4
YesWiki Vulnerable to Stored XSS in Comments
Priority HIGH 67
YesWiki is a wiki system written in PHP.
TI-2025-29090 CVE-2025-46349 · GHSA-2f8p-qqx2-gwr2
YesWiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
Priority HIGH 66
YesWiki is a wiki system written in PHP.
TI-2025-17786 CVE-2025-24019 · GHSA-43c9-gw4x-pcx6
YesWiki vulnerable to authenticated arbitrary file deletion
Priority HIGH 66
YesWiki is a wiki system written in PHP.
TI-2025-17785 CVE-2025-24018 · GHSA-w59h-3x3q-3p6j
YesWiki Vulnerable to Authenticated Stored XSS
Priority HIGH 66
YesWiki is a wiki system written in PHP.
TI-2026-26845 CVE-2026-34598 · GHSA-37fq-47qj-6j5j
YesWiki has Persistant Blind XSS at "/?BazaR&vue=consulter"
Priority MEDIUM 64
YesWiki is a wiki system written in PHP.
TI-2025-32519 CVE-2025-52277 · GHSA-29cj-cxw4-v4j2
Cross Site Scripting vulnerability in YesWiki v.4.54 allows a remote attacker to execute…
Priority MEDIUM 60
Cross Site Scripting vulnerability in YesWiki v.4.54 allows a remote attacker to execute arbitrary code via a crafted payload to the meta configuration robots field
TI-2025-29268 CVE-2025-46550 · GHSA-ggqx-43h2-55jp
Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
Priority MEDIUM 60
YesWiki is a wiki system written in PHP.
TI-2025-29267 CVE-2025-46549 · GHSA-r9gv-qffm-xw6f
Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
Priority MEDIUM 60
YesWiki is a wiki system written in PHP.
TI-2025-29091 CVE-2025-46350 · GHSA-cg4f-cq8h-3ch8
Yeswiki Vulnerable to Authenticated Reflected Cross-site Scripting
Priority MEDIUM 55
YesWiki is a wiki system written in PHP.
TI-2018-15995 CVE-2018-1000641 · GHSA-q5vv-hjfg-5v6r
YesWiki version <= cercopitheque beta 1 contains a PHP Object Injection vulnerability in…
Priority MEDIUM 47
YesWiki version <= cercopitheque beta 1 contains a PHP Object Injection vulnerability in Unserialising user entered parameter in i18n.inc.php that can result in execution of code, disclosure of information.
TI-2021-19147 CVE-2021-43091 · GHSA-xgx2-332h-9x6q
An SQL Injection vlnerability exits in Yeswiki doryphore 20211012 via the email parameter in the registration form.
Priority LOW 36
An SQL Injection vlnerability exits in Yeswiki doryphore 20211012 via the email parameter in the registration form.
TI-2025-29088 CVE-2025-46347 · GHSA-88xg-v53p-fpvf
YesWiki Remote Code Execution via Arbitrary PHP File Write and Execution
Priority LOW 34
YesWiki is a wiki system written in PHP.