Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-105224
  • github.com/yeswiki/yeswiki
 YesWiki before 4.6.7 Stored XSS via Bazar valeur Action yesterday
  • Fix available
  • Severity - 5.1 (Medium)
CVE-2026-104473
  • github.com/yeswiki/yeswiki
 YesWiki before 4.5.3 Multiple Reflected XSS via BazaR and listpages 3 days ago
  • Fix available
  • Severity - 5.1 (Medium)
CVE-2026-104472
  • github.com/yeswiki/yeswiki
 YesWiki before 4.6.7 Missing Authorization via Attachment Download Handler 3 days ago
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-104471
  • github.com/yeswiki/yeswiki
 YesWiki before 4.6.7 Unrestricted File Upload via Bazar CSV Import 3 days ago
  • Fix available
  • Severity - 8.6 (High)
CVE-2026-104470
  • github.com/yeswiki/yeswiki
 YesWiki before 4.6.7 SSRF via Bazar valeur Action url Parameter 3 days ago
  • Fix available
  • Severity - 5.3 (Medium)
CVE-2026-104469
  • github.com/yeswiki/yeswiki
 YesWiki before 4.6.7 Session Fixation via Login in AuthController.php 3 days ago
  • Fix available
  • Severity - 7.6 (High)
CVE-2026-104468
  • github.com/yeswiki/yeswiki
 YesWiki before 4.6.7 Non-Expiring Password Reset Tokens via LostPasswordAction 3 days ago
  • Fix available
  • Severity - 6.3 (Medium)
CVE-2026-104467
  • github.com/yeswiki/yeswiki
 YesWiki before 4.6.7 Authorization Bypass via Public API Mode 3 days ago
  • Fix available
  • Severity - 9.2 (Critical)
CVE-2026-104466
  • github.com/yeswiki/yeswiki
 YesWiki before 4.6.7 Stored XSS via Wakka Markdown Image src Attribute 3 days ago
  • Fix available
  • Severity - 5.1 (Medium)
CVE-2026-104465
  • github.com/yeswiki/yeswiki
 YesWiki before 4.6.7 Reflected XSS via field Parameter in mail Handler 3 days ago
  • Fix available
  • Severity - 5.1 (Medium)
CVE-2026-104464
  • github.com/yeswiki/yeswiki
 YesWiki before 4.6.7 SSRF via Bazar abonnements sync actor parameter 3 days ago
  • Fix available
  • Severity - 8.8 (High)
CVE-2026-104463
  • github.com/yeswiki/yeswiki
 YesWiki before 4.6.7 Unauthenticated SSRF via ActivityPub Inbox 3 days ago
  • Fix available
  • Severity - 8.3 (High)
CVE-2026-104462
  • github.com/yeswiki/yeswiki
 YesWiki before 4.6.7 SQL Injection via nuagetag tags parameter 3 days ago
  • Fix available
  • Severity - 8.8 (High)
CVE-2026-104461
  • github.com/yeswiki/yeswiki
 YesWiki before 4.6.7 Stored XSS via Unsanitized SVG Upload in Bazar FileField 3 days ago
  • Fix available
  • Severity - 5.1 (Medium)
CVE-2026-104460
  • github.com/yeswiki/yeswiki
 YesWiki before 4.6.7 Unauthenticated Blind SQL Injection via newtextsearch 3 days ago
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-104459
  • github.com/yeswiki/yeswiki
 YesWiki before 4.6.7 SSRF via ActivityPub WebFinger actor_handle 3 days ago
  • Fix available
  • Severity - 6.9 (Medium)
Load more...