CVE-2026-105224
MEDIUMCVSS 5.4Description
YesWiki before 4.6.7 contains a cross-site scripting vulnerability in the Bazar valeur action that allows page editors to inject script by rendering unescaped HTML fetched from a remote URL. Attackers can point tools/bazar/actions/valeur.php at a controlled server returning BAZ_fiche_titre markup with an img onerror handler, executing script in every viewer's browser.
Timeline
Published:October 4th, 2026 4:16 PM
Last modified:October 5th, 2026 4:17 PM
CVSS Scoring
CVSS v3: 5.4 (MEDIUM)
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Weaknesses (CWE)
References & Reports
Advisories, patches, and third-party reports
- https://github.com/YesWiki/yeswiki/commit/22a5260b0381824e01d340ce9457c4adb9e18b23
- https://github.com/YesWiki/yeswiki/security/advisories/GHSA-6rvf-7pwm-6j44
- https://www.vulncheck.com/advisories/yeswiki-before-4.6.7-stored-xss-via-bazar-valeur-action
- https://github.com/YesWiki/yeswiki/security/advisories/GHSA-6rvf-7pwm-6j44
Source: NIST NVD · Data may lag official sources by up to one minute