{"action":"Upgrade yaws to 1.92-1 or later.","affected":[{"fixed":"1.92-1","introduced":"0"}],"component":"yaws","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["1.92-1"],"id":"tcs_01M5N9XZ6DPBWA7AP4B55QX53E","modified_at":"2026-10-23T17:47:50.119994128Z","published_at":"2011-12-29T11:55:10.250Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2011-5025","https://security-tracker.debian.org/tracker/CVE-2011-5025"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2011-5025","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2011-5025"}],"summary":"Multiple cross-site scripting (XSS) vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inject arbitrary web script or HTML via (1) the tag parameter to editTag.yaws, (2) th"}