https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-25T19:14:32.618316+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-116202 fkie_cve-2026-116202 2026-10-25T19:14:32.632958+00:00

YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability that allows low-privilege authenticated users to upload unsanitized SVG files through the bazar ImageField class. Attackers can submit a malicious SVG via the image field of the entries API, which is served as image/svg+xml and executes script for users viewing the entry or file.

 https://db.gcve.eu/vuln/ghsa-vp3x-8xh2-ppc9 GHSA-vp3x-8xh2-ppc9 2026-10-25T19:14:32.633040+00:00

YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability that allows low-privilege authenticated users to upload unsanitized SVG files through the bazar ImageField class. Attackers can submit a malicious SVG via the image field of the entries API, which is served as image/svg+xml and executes script for users viewing the entry or file.