Skip to content

Known CVE

YesWiki < 4.5.4 - Cross-Site Scripting

YesWiki < 4.5.4 contains a reflected cross-site scripting caused by unsanitized `idformulaire` parameter in `/?BazaR` endpoint, letting attackers steal cookies and hijack sessions, exploit requires user to click malicious link.

CVE-2025-46550

Medium2025CVSS 5.3CWE-79

cve2025 · xss · yeswiki · vuln

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website