Login Request a demo
YE
Vendor
YesWiki
2 products with CVEs on record
86
CVEs
0
On KEV
54
New 30D
Products
YE
yeswiki
YesWiki
9.8
85 CVEs0 on KEV54 new
CE
Cercopitheque
Yeswiki
9.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-116828
New
YE
yeswiki
YesWiki
4.9
0%
Oct 26YesWiki before 4.7.0 SQL Injection via despam.php INTERVAL operand
CVE-2026-116827
New
YE
yeswiki
YesWiki
6.8
0%
Oct 26YesWiki before 4.7.0 SSRF via copyUrlToLocalFile in Bazar CSV Import
CVE-2026-116826
New
YE
yeswiki
YesWiki
6.8
0%
Oct 26YesWiki before 4.7.0 Authenticated SSRF via Page Duplication API downloadFile
CVE-2026-116825
New
YE
yeswiki
YesWiki
6.5
0%
Oct 26YesWiki from 4.6.2 before 4.7.0 HTTP Signature Replay via ActivityPub Inbox
CVE-2026-116824
New
YE
yeswiki
YesWiki
6.1
0%
Oct 26YesWiki before 4.7.0 Stored XSS via Referer Header in referrers_sites Handler
CVE-2026-116823
New
YE
yeswiki
YesWiki
6.1
0%
Oct 26YesWiki before 4.7.0 Reflected XSS via BazarField $_REQUEST Fallback
CVE-2026-116822
New
YE
yeswiki
YesWiki
5.3
0%
Oct 26YesWiki before 4.7.0 Template Traversal via BazarListeAction template Parameter
CVE-2026-116821
New
YE
yeswiki
YesWiki
6.5
0%
Oct 26YesWiki before 4.7.0 Read-ACL Bypass via SQL LIKE Wildcards in Usernames
CVE-2026-116820
New
YE
yeswiki
YesWiki
5.3
0%
Oct 26YesWiki from 4.6.0 before 4.7.0 SQL Query Disclosure via showreq Parameter
CVE-2026-116211
New
YE
yeswiki
YesWiki
8.2
0%
Oct 25YesWiki 4.5.0 before 4.7.0 SQL Injection via date_maj_fiche in Bazar entry create
CVE-2026-116208
New
YE
yeswiki
YesWiki
8.1
0%
Oct 25YesWiki 4.6.2 before 4.7.0 Missing Authorization in ActivityPub syncActorPosts
CVE-2026-116207
New
YE
yeswiki
YesWiki
9.1
0%
Oct 25YesWiki 4.6.0 before 4.7.0 SQL Injection via Bazar Entries Search API
CVE-2026-116206
New
YE
yeswiki
YesWiki
6.4
0%
Oct 25YesWiki 4.2.0 before 4.7.0 Stored XSS via Comment Raw-HTML Syntax
CVE-2026-116205
New
YE
yeswiki
YesWiki
5.3
0%
Oct 25YesWiki before 4.7.0 Unauthenticated SSRF via [[|URL]] Raw-Inclusion Syntax
CVE-2026-116204
New
YE
yeswiki
YesWiki
8.1
0%
Oct 25YesWiki before 4.7.0 CSRF via despam Admin Action
CVE-2026-116203
New
YE
yeswiki
YesWiki
6.1
0%
Oct 25YesWiki before 4.7.0 Stored XSS via filtertags Action Parameters
CVE-2026-116202
New
YE
yeswiki
YesWiki
5.4
0%
Oct 25YesWiki before 4.7.0 Stored XSS via ImageField SVG Upload
CVE-2026-105224
YE
yeswiki
YesWiki
5.4
0%
Oct 4YesWiki before 4.6.7 Stored XSS via Bazar valeur Action
CVE-2026-104473
YE
yeswiki
YesWiki
6.1
0%
Oct 2YesWiki before 4.5.3 Multiple Reflected XSS via BazaR and listpages
CVE-2026-104472
YE
yeswiki
YesWiki
7.5
0%
Oct 2YesWiki before 4.6.7 Missing Authorization via Attachment Download Handler
CVE-2026-104471
YE
yeswiki
YesWiki
7.2
0%
Oct 2YesWiki before 4.6.7 Unrestricted File Upload via Bazar CSV Import
CVE-2026-104470
YE
yeswiki
YesWiki
5.0
0%
Oct 2YesWiki before 4.6.7 SSRF via Bazar valeur Action url Parameter
CVE-2026-104469
YE
yeswiki
YesWiki
6.8
0%
Oct 2YesWiki before 4.6.7 Session Fixation via Login in AuthController.php
CVE-2026-104468
YE
yeswiki
YesWiki
4.8
0%
Oct 2YesWiki before 4.6.7 Non-Expiring Password Reset Tokens via LostPasswordAction
CVE-2026-104467
YE
yeswiki
YesWiki
8.1
0%
Oct 2YesWiki before 4.6.7 Authorization Bypass via Public API Mode
CVE-2026-104466
YE
yeswiki
YesWiki
5.4
0%
Oct 2YesWiki before 4.6.7 Stored XSS via Wakka Markdown Image src Attribute
CVE-2026-104465
YE
yeswiki
YesWiki
6.1
0%
Oct 2YesWiki before 4.6.7 Reflected XSS via field Parameter in mail Handler
CVE-2026-104464
YE
yeswiki
YesWiki
8.6
0%
Oct 2YesWiki before 4.6.7 SSRF via Bazar abonnements sync actor parameter
CVE-2026-104463
YE
yeswiki
YesWiki
7.0
0%
Oct 2YesWiki before 4.6.7 Unauthenticated SSRF via ActivityPub Inbox
CVE-2026-104462
YE
yeswiki
YesWiki
7.5
0%
Oct 2YesWiki before 4.6.7 SQL Injection via nuagetag tags parameter
CVE-2026-104461
YE
yeswiki
YesWiki
5.4
0%
Oct 2YesWiki before 4.6.7 Stored XSS via Unsanitized SVG Upload in Bazar FileField
CVE-2026-104460
YE
yeswiki
YesWiki
7.5
0%
Oct 2YesWiki before 4.6.7 Unauthenticated Blind SQL Injection via newtextsearch
CVE-2026-104459
YE
yeswiki
YesWiki
6.5
0%
Oct 2YesWiki before 4.6.7 SSRF via ActivityPub WebFinger actor_handle
CVE-2026-104458
YE
yeswiki
YesWiki
6.5
0%
Oct 2YesWiki before 4.6.7 SSRF Guard Bypass via IPv6 Transition Addresses
CVE-2026-104457
YE
yeswiki
YesWiki
8.6
0%
Oct 2YesWiki before 4.6.7 SQL Injection via filtertags filterN parameter
CVE-2026-104456
YE
yeswiki
YesWiki
7.6
0%
Oct 2YesWiki before 4.6.7 Second-Order SQL Injection via ACL Username
CVE-2026-104455
YE
yeswiki
YesWiki
5.3
0%
Oct 2YesWiki before 4.6.7 Read-ACL Bypass via recentchangesrssplus RSS Action
CVE-2026-104454
YE
yeswiki
YesWiki
5.3
0%
Oct 2YesWiki before 4.6.7 ReDoS via wakka.php Edit-Preview Endpoint
CVE-2026-104453
YE
yeswiki
YesWiki
5.4
0%
Oct 2YesWiki before 4.6.7 CSRF Tag Deletion via admintag Action
CVE-2026-104452
YE
yeswiki
YesWiki
5.4
0%
Oct 2YesWiki before 4.6.7 CSRF Attachment Deletion via filemanager Handler
CVE-2026-104451
YE
yeswiki
YesWiki
4.3
0%
Oct 2YesWiki before 4.6.7 CSRF Page Revision Restore via RevisionsHandler
CVE-2026-104450
YE
yeswiki
YesWiki
6.5
0%
Oct 2YesWiki before 4.6.7 ACL Bypass and Stored XSS via pointimage Action
CVE-2026-104449
YE
yeswiki
YesWiki
6.5
0%
Oct 2YesWiki before 4.6.7 Unauthenticated Page Overwrite via Bazar id_fiche
CVE-2026-104448
YE
yeswiki
YesWiki
8.1
0%
Oct 2YesWiki before 4.6.7 CSRF Page Deletion via ajaxdeletepage Handler
CVE-2026-104447
YE
yeswiki
YesWiki
7.1
0%
Oct 2YesWiki before 4.6.7 CSRF Package Deletion via autoupdate UpdateAction
CVE-2026-104446
YE
yeswiki
YesWiki
6.5
0%
Oct 2YesWiki before 4.6.7 Unauthenticated Open Mail Relay via Contact Mail Handler
CVE-2026-104445
YE
yeswiki
YesWiki
8.2
0%
Oct 2YesWiki before 4.6.7 Authentication Bypass via ActivityPub Inbox Actor Spoofing
CVE-2026-104444
YE
yeswiki
YesWiki
7.1
0%
Oct 2YesWiki before 4.6.7 Authorization Bypass via Comments API editComment
CVE-2026-104443
YE
yeswiki
YesWiki
8.1
0%
Oct 2YesWiki before 4.6.7 Scope Bypass via Triples Delete API
CVE-2026-104442
YE
yeswiki
YesWiki
5.8
0%
Oct 2YesWiki before 4.6.7 Unauthenticated SSRF via syndication Action
CVE-2026-104441
YE
yeswiki
YesWiki
5.3
0%
Oct 2YesWiki before 4.6.7 Unauthenticated SSRF via valeur Action
CVE-2026-104440
YE
yeswiki
YesWiki
5.3
0%
Oct 2YesWiki before 4.6.7 Blind SSRF via bazarlist API idtypeannonce Parameter
CVE-2026-104439
YE
yeswiki
YesWiki
5.3
0%
Oct 2YesWiki before 4.6.7 User Enumeration via Lost-Password Flow
CVE-2026-104438
YE
yeswiki
YesWiki
5.3
0%
Oct 2YesWiki before 4.6.7 Information Disclosure via listpagestag and includepages Actions
CVE-2026-52777
YE
yeswiki
YesWiki
9.4
0%
Sep 4YesWiki: Authenticated PHP Object Injection in BazarImportAction via unserialize
CVE-2026-52775
YE
yeswiki
YesWiki
8.8
0%
Sep 4YesWiki Authenticated SQL Injection in ReactionManager
CVE-2026-52774
YE
yeswiki
YesWiki
6.1
1%
Sep 4Reflected XSS via Unescaped `id` Parameter in Bazar Widget HTML Attributes in YesWiki
CVE-2026-52773
YE
yeswiki
YesWiki
6.1
1%
Sep 4Reflected XSS via Unescaped Archived-Revision `time` Parameter in `handlers/page/show.php` in YesWiki
CVE-2026-52772
YE
yeswiki
YesWiki
5.5
0%
Sep 4YesWiki: Bazar form-field templates still apply `|raw('html')` to `field.label` / `field.hint` in attribute and label-body contexts — stored XSS in form renders (sibling class of commit `e6b66aa`)
CVE-2026-52771
YE
yeswiki
YesWiki
8.3
1%
Sep 4YesWiki: Second-Order SQL Injection in Page Delete API via Unescaped Page Tag (`ApiController::deletePage`)