CVE-2026-52771
1 advisory.
Packagist/yeswiki/yeswiki CVE-2026-52771: high 8.3, EPSS 0.51%
YesWiki: Second-Order SQL Injection in Page Delete API via Unescaped Page Tag (`ApiController::deletePage`)
Action: Upgrade yeswiki/yeswiki to 4.6.6 or later.
composer require yeswiki/yeswiki:4.6.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.2.0 | 4.6.6 | - |
Fixed versions
| 4.6.6 |
Sources
- osv: GHSA-8f2v-2qhj-gfwg
- https://github.com/YesWiki/yeswiki/security/advisories/GHSA-8f2v-2qhj-gfwg
- https://github.com/YesWiki/yeswiki/commit/23d3cc124613b9428ab963b31807c08879a9c631
- https://github.com/YesWiki/yeswiki
CVE-2026-52771 · published · modified · JSON