CVE-2026-52774
1 advisory.
Packagist/yeswiki/yeswiki CVE-2026-52774: medium 6.1, EPSS 0.66%
YesWiki Vulnerable to Reflected XSS via Unescaped `id` Parameter in Bazar Widget HTML Attributes
Action: Upgrade yeswiki/yeswiki to 4.6.6 or later.
composer require yeswiki/yeswiki:4.6.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.6.6 | - |
Fixed versions
| 4.6.6 |
Sources
- osv: GHSA-r5xw-gcgw-hwp5
- https://github.com/YesWiki/yeswiki/security/advisories/GHSA-r5xw-gcgw-hwp5
- https://github.com/YesWiki/yeswiki/commit/1aa2710c7505630b858f2142a65f9441bfaba2b2
- https://github.com/YesWiki/yeswiki
CVE-2026-52774 · published · modified · JSON