https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-25T23:51:29.773416+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-116203 fkie_cve-2026-116203 2026-10-25T23:51:29.783080+00:00

YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in the filtertags action, which echoes attacker-controlled token values without output encoding. Anonymous attackers can inject markup via action-attribute parameters that bypasses the allow_raw_html gate, executing JavaScript for every page viewer.

 https://db.gcve.eu/vuln/ghsa-2cq3-2fgh-69rq GHSA-2cq3-2fgh-69rq 2026-10-25T23:51:29.783141+00:00

YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in the filtertags action, which echoes attacker-controlled token values without output encoding. Anonymous attackers can inject markup via action-attribute parameters that bypasses the allow_raw_html gate, executing JavaScript for every page viewer.