YesWiki records

17 published records for vendor yeswiki.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 3
With a fix record: 82.4%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

17 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2018-13045Proof of concept	SQL injection vulnerability in the "Bazar" page in Yeswiki Cercopitheque 2018-06-19-1 and earlier allows attackers to execute arbitrary SQL yeswiki · cercopitheque · CWE-89 pre-auth RCE SQL injection	Critical9.8	—	3.2%	Jan 2, 2019
40Plan	CVE-2018-1000641No exploit	YesWiki version <= cercopitheque beta 1 contains a PHP Object Injection vulnerability in Unserialising user entered parameter in i18n.inc.phyeswiki · yeswiki · CWE-502 Pre-auth Deserialization	Critical9.8	—	2.4%	Aug 20, 2018
39Monitor	CVE-2025-46348No exploit	YesWiki Vulnerable to Unauthenticated Site Backup Creation and Downloadyeswiki · yeswiki · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.6%	Apr 29, 2025
36Monitor	CVE-2024-51478No exploit	Use of a Broken or Risky Cryptographic Algorithm in YesWikiyeswiki · yeswiki · CWE-327 Pre-auth Weak crypto	Critical9.1	—	0.3%	Oct 31, 2024
32Monitor	CVE-2025-31131Proof of concept	Path Traversal allowing arbitrary read of files in Yeswikiyeswiki · yeswiki · CWE-22 Pre-auth Path traversal	High7.5	—	5.5%	Apr 1, 2025
30Monitor	CVE-2021-43091No exploit	An SQL Injection vlnerability exits in Yeswiki doryphore 20211012 via the email parameter in the registration form.yeswiki · yeswiki · CWE-89 Pre-auth SQL injection	High7.5	—	1.4%	Mar 25, 2022
28Monitor	CVE-2025-24019No exploit	YesWiki vulnerable to authenticated arbitrary file deletionyeswiki · yeswiki · CWE-22 Path traversal	High7.1	—	0.6%	Jan 21, 2025
28Monitor	CVE-2026-34598No exploit	YesWiki has Persistant Blind XSS at "/?BazaR&vue=consulter"yeswiki · yeswiki · CWE-79 Pre-auth XSS	High7.1	—	0.2%	Apr 2, 2026
25Monitor	CVE-2025-46346No exploit	YesWiki Vulnerable to Stored XSS in Commentsyeswiki · yeswiki · CWE-79 Pre-auth XSS	Medium6.3	—	0.3%	Apr 29, 2025
24Monitor	CVE-2025-46349Proof of concept	YesWiki Vulnerable to Unauthenticated Reflected Cross-site Scriptingyeswiki · yeswiki · CWE-79 Pre-auth XSS	Medium6.1	—	0.6%	Apr 29, 2025
24Monitor	CVE-2025-46549Proof of concept	Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scriptingyeswiki · yeswiki · CWE-79 Pre-auth XSS	Medium6.1	—	0.5%	Apr 29, 2025
24Monitor	CVE-2025-46550Proof of concept	Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scriptingyeswiki · yeswiki · CWE-79 Pre-auth XSS	Medium6.1	—	0.5%	Apr 29, 2025
24Monitor	CVE-2025-52277No exploit	Cross Site Scripting vulnerability in YesWiki v.4.54 allows a remote attacker to execute arbitrary code via a crafted payload to the meta coyeswiki · yeswiki · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.3%	Sep 9, 2025
24Monitor	CVE-2025-24017No exploit	YesWiki Vulnerable to Unauthenticated DOM Based XSSyeswiki · yeswiki · CWE-79 Pre-auth XSS	Medium6.1	—	0.3%	Jan 21, 2025
23Monitor	CVE-2025-46347No exploit	YesWiki Remote Code Execution via Arbitrary PHP File Write and Executionyeswiki · yeswiki · CWE-116 pre-auth RCE	Medium5.8	—	1.0%	Apr 29, 2025
21Monitor	CVE-2025-24018No exploit	YesWiki Vulnerable to Authenticated Stored XSSyeswiki · yeswiki · CWE-79 XSS	Medium5.4	—	0.4%	Jan 21, 2025
19Monitor	CVE-2025-46350No exploit	Yeswiki Vulnerable to Authenticated Reflected Cross-site Scriptingyeswiki · yeswiki · CWE-79 XSS	Medium4.8	—	0.2%	Apr 29, 2025

CVE-2018-13045
40Plan
SQL injection vulnerability in the "Bazar" page in Yeswiki Cercopitheque 2018-06-19-1 and earlier allows attackers to execute arbitrary SQL
CriticalCVSS 9.8Proof of conceptEPSS 3%
- pre-auth RCE
- SQL injection
yeswiki · cercopithequeJan 2, 2019
CVE-2018-1000641
40Plan
YesWiki version <= cercopitheque beta 1 contains a PHP Object Injection vulnerability in Unserialising user entered parameter in i18n.inc.ph
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Deserialization
yeswiki · yeswikiAug 20, 2018
CVE-2025-46348
39Monitor
YesWiki Vulnerable to Unauthenticated Site Backup Creation and Download
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
yeswiki · yeswikiApr 29, 2025
CVE-2024-51478
36Monitor
Use of a Broken or Risky Cryptographic Algorithm in YesWiki
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Weak crypto
yeswiki · yeswikiOct 31, 2024
CVE-2025-31131
32Monitor
Path Traversal allowing arbitrary read of files in Yeswiki
HighCVSS 7.5Proof of conceptEPSS 5%
- Pre-auth
- Path traversal
yeswiki · yeswikiApr 1, 2025
CVE-2021-43091
30Monitor
An SQL Injection vlnerability exits in Yeswiki doryphore 20211012 via the email parameter in the registration form.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- SQL injection
yeswiki · yeswikiMar 25, 2022
CVE-2025-24019
28Monitor
YesWiki vulnerable to authenticated arbitrary file deletion
HighCVSS 7.1No exploitEPSS 0%
- Path traversal
yeswiki · yeswikiJan 21, 2025
CVE-2026-34598
28Monitor
YesWiki has Persistant Blind XSS at "/?BazaR&vue=consulter"
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
yeswiki · yeswikiApr 2, 2026
CVE-2025-46346
25Monitor
YesWiki Vulnerable to Stored XSS in Comments
MediumCVSS 6.3No exploitEPSS 0%
- Pre-auth
- XSS
yeswiki · yeswikiApr 29, 2025
CVE-2025-46349
24Monitor
YesWiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
MediumCVSS 6.1Proof of conceptEPSS 0%
- Pre-auth
- XSS
yeswiki · yeswikiApr 29, 2025
CVE-2025-46549
24Monitor
Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
MediumCVSS 6.1Proof of conceptEPSS 0%
- Pre-auth
- XSS
yeswiki · yeswikiApr 29, 2025
CVE-2025-46550
24Monitor
Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
MediumCVSS 6.1Proof of conceptEPSS 0%
- Pre-auth
- XSS
yeswiki · yeswikiApr 29, 2025
CVE-2025-52277
24Monitor
Cross Site Scripting vulnerability in YesWiki v.4.54 allows a remote attacker to execute arbitrary code via a crafted payload to the meta co
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
yeswiki · yeswikiSep 9, 2025
CVE-2025-24017
24Monitor
YesWiki Vulnerable to Unauthenticated DOM Based XSS
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
yeswiki · yeswikiJan 21, 2025
CVE-2025-46347
23Monitor
YesWiki Remote Code Execution via Arbitrary PHP File Write and Execution
MediumCVSS 5.8No exploitEPSS 1%
- pre-auth RCE
yeswiki · yeswikiApr 29, 2025
CVE-2025-24018
21Monitor
YesWiki Vulnerable to Authenticated Stored XSS
MediumCVSS 5.4No exploitEPSS 0%
- XSS
yeswiki · yeswikiJan 21, 2025
CVE-2025-46350
19Monitor
Yeswiki Vulnerable to Authenticated Reflected Cross-site Scripting
MediumCVSS 4.8No exploitEPSS 0%
- XSS
yeswiki · yeswikiApr 29, 2025