CVE-2026-52763
1 advisory.
Packagist/yeswiki/yeswiki CVE-2026-52763: medium 6.5, EPSS 0.38%
YesWiki: SQL injection via the `recentchanges` action `period` argument leads to arbitrary DB read
Action: Upgrade yeswiki/yeswiki to 4.6.6 or later.
composer require yeswiki/yeswiki:4.6.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.6.6 | - |
Fixed versions
| 4.6.6 |
Sources
- osv: GHSA-89v6-j5x6-cmj3
- https://github.com/YesWiki/yeswiki/security/advisories/GHSA-89v6-j5x6-cmj3
- https://github.com/YesWiki/yeswiki/commit/5da27474c3ee62270c8a6b9d7055d494cdbd38e5
- https://github.com/YesWiki/yeswiki
CVE-2026-52763 · published · modified · JSON