Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: yeswiki — GitHub Security Advisory (GHSA-6rvf-7pwm-6j44) Clear all filters
TI-2026-67552 CVE-2026-105224 · GHSA-4jc3-v5mf-cppg

YesWiki before 4.6.7 Stored XSS via Bazar valeur Action

Priority MEDIUM 56

YesWiki before 4.6.7 contains a cross-site scripting vulnerability in the Bazar valeur action that allows page editors to inject script by rendering unescaped HTML fetched from a remote URL.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00203 Published 2026-10-04 Fixed in 4.6.7 CWE-79
TI-2026-66112 CVE-2026-104470 · GHSA-32r4-8mw9-77h4

YesWiki before 4.6.7 SSRF via Bazar valeur Action url Parameter

Priority MEDIUM 57

YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows page editors to make the server fetch arbitrary URLs via the url parameter of the Bazar valeur action.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00243 Published 2026-10-02 Fixed in 4.6.7 CWE-918