The last major version of YesWiki is currently being supported with security updates.
| Version | Supported |
|---|---|
| doryphore 4.x | ✅ |
| cercopitheque 3.x | ❌ |
| bachibouzouk 2.x | ❌ |
| anacoluthe 1.x | ❌ |
You can contact us by email at mailto:contact+security@yeswiki.net
Security: YesWiki/yeswiki
Security
SECURITY.md
-
Authenticated SQL Injection via id_fiche in EntryManager::formatDataBeforeSave()GHSA-f58v-p6j9-24c2 published
Apr 17, 2026 by mrflosHigh -
Persistant Blind XSS at "/?BazaR&vue=consulter"GHSA-37fq-47qj-6j5j published
Mar 29, 2026 by mrflosHigh -
Stored XSS in CommentsGHSA-59x8-cvxh-3mm4 published
Apr 28, 2025 by mrflosCritical -
Remote Code Execution via Arbitrary PHP File Write and ExecutionGHSA-88xg-v53p-fpvf published
Apr 28, 2025 by mrflosCritical -
Multiple Reflected Cross Site Scripting VulnerabilitiesGHSA-5724-x3rh-5qqq published
Mar 29, 2026 by mrflosHigh -
Uauthenticated Site Backup Creation and DownloadGHSA-wc9g-6j9w-hr95 published
Apr 28, 2025 by mrflosCritical -
Unauthenticated reflected XSS in YesWiki <= 4.5.3GHSA-2f8p-qqx2-gwr2 published
Apr 28, 2025 by mrflosHigh -
Path Traversal allowing arbitrary read of files in Yeswiki v4.5.1GHSA-w34w-fvp3-68xm published
Apr 1, 2025 by mrflosHigh -
Reflected XSS (Authenticated) in Yeswiki v4.5.1GHSA-cg4f-cq8h-3ch8 published
Apr 28, 2025 by mrflosLow -
Reflected XSS (Unauthenticated) in Yeswiki v4.5.1GHSA-r9gv-qffm-xw6f published
Apr 28, 2025 by mrflosModerate
Learn more about advisories related to YesWiki/yeswiki in the GitHub Advisory Database