Skip to content
OpenAdvisories

Vendor

YesWiki

82 known vulnerabilities.

Products

yeswiki 82
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-52774 Public exploit

    Reflected XSS via Unescaped `id` Parameter in Bazar Widget HTML Attributes in YesWiki

    YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki's Bazar widget handler reflects the id GET parameter into HTML attributes using strip_tags() only. Because strip_tags() does not escape double quotes, an attacker can break out of the at…

    YesWiki yeswiki yeswiki/yeswiki Packagist
  • High 8.6
    CVE-2025-31131 Public exploit

    Path Traversal allowing arbitrary read of files in Yeswiki

    YesWiki is a wiki system written in PHP. The squelette parameter is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server. This vulnerability is fixed in 4.5.2.

    YesWiki yeswiki yeswiki/yeswiki Packagist