tocsin

CVE-2025-46549

1 advisory.

Packagist/yeswiki/yeswiki CVE-2025-46549: medium 5.3, EPSS 0.54%

Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting

Action: Upgrade yeswiki/yeswiki to 4.5.4 or later.

composer require yeswiki/yeswiki:4.5.4

Affected

introducedfixedlast affected
04.5.4-

Fixed versions

4.5.4

Sources

CVE-2025-46549 · published · modified · JSON