agentprime: yeswiki

agentprime: yeswikiEvery new CVE for yeswiki.https://agentprime.io/CVE-2026-116828: YesWiki before 4.7.0 SQL Injection via despam.php INTERVAL operandhttps://agentprime.io/advisories/CVE-2026-116828/https://agentprime.io/advisories/CVE-2026-116828/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 23:05:52 GMTCVECVE-2026-116827: YesWiki before 4.7.0 SSRF via copyUrlToLocalFile in Bazar CSV Importhttps://agentprime.io/advisories/CVE-2026-116827/https://agentprime.io/advisories/CVE-2026-116827/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 23:05:51 GMTCVECVE-2026-116826: YesWiki before 4.7.0 Authenticated SSRF via Page Duplication API downloadFilehttps://agentprime.io/advisories/CVE-2026-116826/https://agentprime.io/advisories/CVE-2026-116826/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 23:05:51 GMTCVECVE-2026-116825: YesWiki from 4.6.2 before 4.7.0 HTTP Signature Replay via ActivityPub Inboxhttps://agentprime.io/advisories/CVE-2026-116825/https://agentprime.io/advisories/CVE-2026-116825/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 23:05:50 GMTCVECVE-2026-116824: YesWiki before 4.7.0 Stored XSS via Referer Header in referrers_sites Handlerhttps://agentprime.io/advisories/CVE-2026-116824/https://agentprime.io/advisories/CVE-2026-116824/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 23:05:49 GMTCVECVE-2026-116823: YesWiki before 4.7.0 Reflected XSS via BazarField $_REQUEST Fallbackhttps://agentprime.io/advisories/CVE-2026-116823/https://agentprime.io/advisories/CVE-2026-116823/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 23:05:49 GMTCVECVE-2026-116822: YesWiki before 4.7.0 Template Traversal via BazarListeAction template Parameterhttps://agentprime.io/advisories/CVE-2026-116822/https://agentprime.io/advisories/CVE-2026-116822/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 23:05:48 GMTCVECVE-2026-116821: YesWiki before 4.7.0 Read-ACL Bypass via SQL LIKE Wildcards in Usernameshttps://agentprime.io/advisories/CVE-2026-116821/https://agentprime.io/advisories/CVE-2026-116821/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 23:05:47 GMTCVECVE-2026-116820: YesWiki from 4.6.0 before 4.7.0 SQL Query Disclosure via showreq Parameterhttps://agentprime.io/advisories/CVE-2026-116820/https://agentprime.io/advisories/CVE-2026-116820/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 23:05:47 GMTCVECVE-2026-116211: YesWiki 4.5.0 before 4.7.0 SQL Injection via date_maj_fiche in Bazar entry createhttps://agentprime.io/advisories/CVE-2026-116211/https://agentprime.io/advisories/CVE-2026-116211/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 Oct 2026 13:20:38 GMTCVECVE-2026-116208: YesWiki 4.6.2 before 4.7.0 Missing Authorization in ActivityPub syncActorPostshttps://agentprime.io/advisories/CVE-2026-116208/https://agentprime.io/advisories/CVE-2026-116208/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 Oct 2026 13:20:38 GMTCVECVE-2026-116207: YesWiki 4.6.0 before 4.7.0 SQL Injection via Bazar Entries Search APIhttps://agentprime.io/advisories/CVE-2026-116207/https://agentprime.io/advisories/CVE-2026-116207/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 Oct 2026 13:20:37 GMTCVECVE-2026-116206: YesWiki 4.2.0 before 4.7.0 Stored XSS via Comment Raw-HTML Syntaxhttps://agentprime.io/advisories/CVE-2026-116206/https://agentprime.io/advisories/CVE-2026-116206/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 Oct 2026 13:20:36 GMTCVECVE-2026-116205: YesWiki before 4.7.0 Unauthenticated SSRF via [[|URL]] Raw-Inclusion Syntaxhttps://agentprime.io/advisories/CVE-2026-116205/https://agentprime.io/advisories/CVE-2026-116205/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 Oct 2026 13:20:35 GMTCVECVE-2026-116204: YesWiki before 4.7.0 CSRF via despam Admin Actionhttps://agentprime.io/advisories/CVE-2026-116204/https://agentprime.io/advisories/CVE-2026-116204/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 Oct 2026 13:20:35 GMTCVECVE-2026-116203: YesWiki before 4.7.0 Stored XSS via filtertags Action Parametershttps://agentprime.io/advisories/CVE-2026-116203/https://agentprime.io/advisories/CVE-2026-116203/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 Oct 2026 13:20:34 GMTCVECVE-2026-116202: YesWiki before 4.7.0 Stored XSS via ImageField SVG Uploadhttps://agentprime.io/advisories/CVE-2026-116202/https://agentprime.io/advisories/CVE-2026-116202/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 Oct 2026 13:20:33 GMTCVECVE-2026-105224: YesWiki before 4.6.7 Stored XSS via Bazar valeur Actionhttps://agentprime.io/advisories/CVE-2026-105224/https://agentprime.io/advisories/CVE-2026-105224/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 04 Oct 2026 15:04:53 GMTCVECVE-2026-104472: YesWiki before 4.6.7 Missing Authorization via Attachment Download Handlerhttps://agentprime.io/advisories/CVE-2026-104472/https://agentprime.io/advisories/CVE-2026-104472/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:36 GMTCVECVE-2026-104471: YesWiki before 4.6.7 Unrestricted File Upload via Bazar CSV Importhttps://agentprime.io/advisories/CVE-2026-104471/https://agentprime.io/advisories/CVE-2026-104471/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:36 GMTCVECVE-2026-104470: YesWiki before 4.6.7 SSRF via Bazar valeur Action url Parameterhttps://agentprime.io/advisories/CVE-2026-104470/https://agentprime.io/advisories/CVE-2026-104470/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:35 GMTCVECVE-2026-104469: YesWiki before 4.6.7 Session Fixation via Login in AuthController.phphttps://agentprime.io/advisories/CVE-2026-104469/https://agentprime.io/advisories/CVE-2026-104469/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:34 GMTCVECVE-2026-104468: YesWiki before 4.6.7 Non-Expiring Password Reset Tokens via LostPasswordActionhttps://agentprime.io/advisories/CVE-2026-104468/https://agentprime.io/advisories/CVE-2026-104468/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:34 GMTCVECVE-2026-104467: YesWiki before 4.6.7 Authorization Bypass via Public API Modehttps://agentprime.io/advisories/CVE-2026-104467/https://agentprime.io/advisories/CVE-2026-104467/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:33 GMTCVEcriticalCVE-2026-104466: YesWiki before 4.6.7 Stored XSS via Wakka Markdown Image src Attributehttps://agentprime.io/advisories/CVE-2026-104466/https://agentprime.io/advisories/CVE-2026-104466/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:32 GMTCVECVE-2026-104465: YesWiki before 4.6.7 Reflected XSS via field Parameter in mail Handlerhttps://agentprime.io/advisories/CVE-2026-104465/https://agentprime.io/advisories/CVE-2026-104465/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:32 GMTCVECVE-2026-104464: YesWiki before 4.6.7 SSRF via Bazar abonnements sync actor parameterhttps://agentprime.io/advisories/CVE-2026-104464/https://agentprime.io/advisories/CVE-2026-104464/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:31 GMTCVECVE-2026-104463: YesWiki before 4.6.7 Unauthenticated SSRF via ActivityPub Inboxhttps://agentprime.io/advisories/CVE-2026-104463/https://agentprime.io/advisories/CVE-2026-104463/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:30 GMTCVECVE-2026-104462: YesWiki before 4.6.7 SQL Injection via nuagetag tags parameterhttps://agentprime.io/advisories/CVE-2026-104462/https://agentprime.io/advisories/CVE-2026-104462/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:30 GMTCVECVE-2026-104461: YesWiki before 4.6.7 Stored XSS via Unsanitized SVG Upload in Bazar FileFieldhttps://agentprime.io/advisories/CVE-2026-104461/https://agentprime.io/advisories/CVE-2026-104461/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:29 GMTCVECVE-2026-104460: YesWiki before 4.6.7 Unauthenticated Blind SQL Injection via newtextsearchhttps://agentprime.io/advisories/CVE-2026-104460/https://agentprime.io/advisories/CVE-2026-104460/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:28 GMTCVECVE-2026-104459: YesWiki before 4.6.7 SSRF via ActivityPub WebFinger actor_handlehttps://agentprime.io/advisories/CVE-2026-104459/https://agentprime.io/advisories/CVE-2026-104459/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:28 GMTCVECVE-2026-104458: YesWiki before 4.6.7 SSRF Guard Bypass via IPv6 Transition Addresseshttps://agentprime.io/advisories/CVE-2026-104458/https://agentprime.io/advisories/CVE-2026-104458/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:27 GMTCVECVE-2026-104457: YesWiki before 4.6.7 SQL Injection via filtertags filterN parameterhttps://agentprime.io/advisories/CVE-2026-104457/https://agentprime.io/advisories/CVE-2026-104457/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:27 GMTCVECVE-2026-104456: YesWiki before 4.6.7 Second-Order SQL Injection via ACL Usernamehttps://agentprime.io/advisories/CVE-2026-104456/https://agentprime.io/advisories/CVE-2026-104456/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:26 GMTCVECVE-2026-104455: YesWiki before 4.6.7 Read-ACL Bypass via recentchangesrssplus RSS Actionhttps://agentprime.io/advisories/CVE-2026-104455/https://agentprime.io/advisories/CVE-2026-104455/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:25 GMTCVECVE-2026-104454: YesWiki before 4.6.7 ReDoS via wakka.php Edit-Preview Endpointhttps://agentprime.io/advisories/CVE-2026-104454/https://agentprime.io/advisories/CVE-2026-104454/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:25 GMTCVECVE-2026-104453: YesWiki before 4.6.7 CSRF Tag Deletion via admintag Actionhttps://agentprime.io/advisories/CVE-2026-104453/https://agentprime.io/advisories/CVE-2026-104453/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:24 GMTCVECVE-2026-104452: YesWiki before 4.6.7 CSRF Attachment Deletion via filemanager Handlerhttps://agentprime.io/advisories/CVE-2026-104452/https://agentprime.io/advisories/CVE-2026-104452/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:23 GMTCVECVE-2026-104451: YesWiki before 4.6.7 CSRF Page Revision Restore via RevisionsHandlerhttps://agentprime.io/advisories/CVE-2026-104451/https://agentprime.io/advisories/CVE-2026-104451/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:23 GMTCVECVE-2026-104450: YesWiki before 4.6.7 ACL Bypass and Stored XSS via pointimage Actionhttps://agentprime.io/advisories/CVE-2026-104450/https://agentprime.io/advisories/CVE-2026-104450/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:22 GMTCVECVE-2026-104449: YesWiki before 4.6.7 Unauthenticated Page Overwrite via Bazar id_fichehttps://agentprime.io/advisories/CVE-2026-104449/https://agentprime.io/advisories/CVE-2026-104449/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:21 GMTCVECVE-2026-104448: YesWiki before 4.6.7 CSRF Page Deletion via ajaxdeletepage Handlerhttps://agentprime.io/advisories/CVE-2026-104448/https://agentprime.io/advisories/CVE-2026-104448/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:21 GMTCVECVE-2026-104447: YesWiki before 4.6.7 CSRF Package Deletion via autoupdate UpdateActionhttps://agentprime.io/advisories/CVE-2026-104447/https://agentprime.io/advisories/CVE-2026-104447/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:20 GMTCVECVE-2026-104446: YesWiki before 4.6.7 Unauthenticated Open Mail Relay via Contact Mail Handlerhttps://agentprime.io/advisories/CVE-2026-104446/https://agentprime.io/advisories/CVE-2026-104446/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:19 GMTCVECVE-2026-104445: YesWiki before 4.6.7 Authentication Bypass via ActivityPub Inbox Actor Spoofinghttps://agentprime.io/advisories/CVE-2026-104445/https://agentprime.io/advisories/CVE-2026-104445/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:19 GMTCVECVE-2026-104444: YesWiki before 4.6.7 Authorization Bypass via Comments API editCommenthttps://agentprime.io/advisories/CVE-2026-104444/https://agentprime.io/advisories/CVE-2026-104444/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:18 GMTCVECVE-2026-104443: YesWiki before 4.6.7 Scope Bypass via Triples Delete APIhttps://agentprime.io/advisories/CVE-2026-104443/https://agentprime.io/advisories/CVE-2026-104443/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:17 GMTCVECVE-2026-104442: YesWiki before 4.6.7 Unauthenticated SSRF via syndication Actionhttps://agentprime.io/advisories/CVE-2026-104442/https://agentprime.io/advisories/CVE-2026-104442/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:17 GMTCVECVE-2026-104441: YesWiki before 4.6.7 Unauthenticated SSRF via valeur Actionhttps://agentprime.io/advisories/CVE-2026-104441/https://agentprime.io/advisories/CVE-2026-104441/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 11:38:16 GMTCVE