Skip to content
OpenAdvisories

Vendor

YesWiki

82 known vulnerabilities.

Products

yeswiki 82
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-52774 Public exploit

    Reflected XSS via Unescaped `id` Parameter in Bazar Widget HTML Attributes in YesWiki

    YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki's Bazar widget handler reflects the id GET parameter into HTML attributes using strip_tags() only. Because strip_tags() does not escape double quotes, an attacker can break out of the at…

    YesWiki yeswiki yeswiki/yeswiki Packagist