The two last major versions of YesWiki are currently being supported with security updates.
| Version | Supported |
|---|---|
| doryphore 4.x | ✅ |
| cercopitheque 3.x | ✅ |
| bachibouzouk 2.x | ❌ |
| anacoluthe 1.x | ❌ |
You can contact us by email at mailto:[email protected]
Security: YesWiki/yeswiki
Security
SECURITY.md
-
Stored XSS in CommentsGHSA-59x8-cvxh-3mm4 published
Apr 28, 2025 by mrflosCritical -
Remote Code Execution via Arbitrary PHP File Write and ExecutionGHSA-88xg-v53p-fpvf published
Apr 28, 2025 by mrflosCritical -
Uauthenticated Site Backup Creation and DownloadGHSA-wc9g-6j9w-hr95 published
Apr 28, 2025 by mrflosCritical -
Unauthenticated reflected XSS in YesWiki <= 4.5.3GHSA-2f8p-qqx2-gwr2 published
Apr 28, 2025 by mrflosHigh -
Path Traversal allowing arbitrary read of files in Yeswiki v4.5.1GHSA-w34w-fvp3-68xm published
Apr 1, 2025 by mrflosHigh -
Reflected XSS (Authenticated) in Yeswiki v4.5.1GHSA-cg4f-cq8h-3ch8 published
Apr 28, 2025 by mrflosLow -
Reflected XSS (Unauthenticated) in Yeswiki v4.5.1GHSA-r9gv-qffm-xw6f published
Apr 28, 2025 by mrflosModerate -
Reflected XSS (Unauthenticated) in Yeswiki v4.5.1GHSA-ggqx-43h2-55jp published
Apr 28, 2025 by mrflosModerate -
Unauthenticated DOM Based XSS in YesWiki <= 4.4.5GHSA-wphc-5f2j-jhvg published
Jan 21, 2025 by mrflosHigh -
Authenticated Stored XSS in YesWiki <= 4.4.5GHSA-w59h-3x3q-3p6j published
Jan 21, 2025 by mrflosHigh
Learn more about advisories related to YesWiki/yeswiki in the GitHub Advisory Database