Skip to content
OpenAdvisories

Package · Packagist

yeswiki/yeswiki

31 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-52774 Public exploit Scanner template

    Reflected XSS via Unescaped `id` Parameter in Bazar Widget HTML Attributes in YesWiki

    YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki's Bazar widget handler reflects the id GET parameter into HTML attributes using strip_tags() only. Because strip_tags() does not escape double quotes, an attacker can break out of the at…

    YesWiki yeswiki yeswiki/yeswiki Packagist