https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-25T23:51:31.275004+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-116206 fkie_cve-2026-116206 2026-10-25T23:51:31.293178+00:00

YesWiki from 4.2.0 before 4.7.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject script into comment bodies using the wakka raw-HTML syntax. Attackers can post comments via the /api/comments endpoint that render unescaped through the Twig raw filter, executing JavaScript in administrators' and visitors' sessions.

 https://db.gcve.eu/vuln/ghsa-xxc7-5x7q-85f3 GHSA-xxc7-5x7q-85f3 2026-10-25T23:51:31.293253+00:00

YesWiki from 4.2.0 before 4.7.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject script into comment bodies using the wakka raw-HTML syntax. Attackers can post comments via the /api/comments endpoint that render unescaped through the Twig raw filter, executing JavaScript in administrators' and visitors' sessions.