{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.5.4"}],"component":"yeswiki/yeswiki","cve_ids":["CVE-2025-52277"],"ecosystem":"Packagist","epss":0.00394,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-29cj-cxw4-v4j2","id":"tcs_01M5KERS3T7NQHQ3K537AB3HFE","modified_at":"2025-09-10T22:28:43.933753Z","published_at":"2025-09-09T15:31:20Z","references":["https://osv.dev/vulnerability/GHSA-29cj-cxw4-v4j2","https://nvd.nist.gov/vuln/detail/CVE-2025-52277","https://github.com/YesWiki/yeswiki","https://github.com/nakkouchtarek/CVE/tree/main/CVE-2025-52277","http://yeswiki.com"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-29cj-cxw4-v4j2","url":"https://osv.dev/vulnerability/GHSA-29cj-cxw4-v4j2"}],"summary":"YesWiki Cross Site Scripting vulnerability"}