Beveiligingsadvies

CVE-2026-34598

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-02 17:37:37

Laatst bijgewerkt 2026-04-02 19:09:44

Toegewezen door GitHub_M

CVSS-score 7.1

Status PUBLISHED

Beschrijving

YesWiki is a wiki system written in PHP. Prior to version 4.6.0, a stored and blind XSS vulnerability exists in the form title field. A malicious attacker can inject JavaScript without any authentication via a form title that is saved in the backend database. When any user visits that injected page, the JavaScript payload gets executed. This issue has been patched in version 4.6.0.

← Alle CVE's bekijken Bekijk op cve.org ↗