{"action":"Upgrade yeswiki/yeswiki to 4.5.4 or later.","affected":[{"fixed":"4.5.4","introduced":"0"}],"component":"yeswiki/yeswiki","cve_ids":["CVE-2025-46350"],"ecosystem":"Packagist","epss":0.00291,"exploited":false,"fixed_versions":["4.5.4"],"ghsa_id":"GHSA-cg4f-cq8h-3ch8","id":"tcs_01M5KF0Y7BMFCJGBEP01EZQN7Y","modified_at":"2026-09-10T03:50:23.732808172Z","published_at":"2025-04-29T14:37:04Z","references":["https://osv.dev/vulnerability/GHSA-cg4f-cq8h-3ch8","https://github.com/YesWiki/yeswiki/security/advisories/GHSA-cg4f-cq8h-3ch8","https://nvd.nist.gov/vuln/detail/CVE-2025-46350","https://github.com/YesWiki/yeswiki/commit/e2603176a4607b83659635a0c517550d4a171cb9","https://github.com/YesWiki/yeswiki"],"severity":{"label":"low","score":3.8},"sources":[{"source":"osv","source_id":"GHSA-cg4f-cq8h-3ch8","url":"https://osv.dev/vulnerability/GHSA-cg4f-cq8h-3ch8"}],"summary":"Yeswiki Vulnerable to Authenticated Reflected Cross-site Scripting"}