CVE-2026-52762
1 advisory.
Packagist/yeswiki/yeswiki CVE-2026-52762: high
YesWiki: Authenticated (Admin) Server-Side Template Injection to Remote Code Execution via Bazar Semantic Templates
Action: Upgrade yeswiki/yeswiki to 4.6.6 or later.
composer require yeswiki/yeswiki:4.6.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.6.6 | - |
Fixed versions
| 4.6.6 |
Sources
- osv: GHSA-65p8-9433-jpcp
- https://github.com/YesWiki/yeswiki/security/advisories/GHSA-65p8-9433-jpcp
- https://github.com/YesWiki/yeswiki/commit/89462f1577a8a1fe7fcff75e77b5058a74d8047b
- https://github.com/YesWiki/yeswiki
CVE-2026-52762 · published · modified · JSON