CVE-2026-52777

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, there is an authenticated PHP object injection vulnerability in BazarImportAction via unserialize. This issue has been patched in version 4.6.6...

CVE-2026-52777: Cross-Site Request Forgery (CSRF)

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, there is an authenticated PHP object injection vulnerability in BazarImportAction via unserialize. This issue has been patched in version 4.6.6...

CVE-2026-52777 YesWiki: Authenticated PHP Object Injection in BazarImportAction via unserialize

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, there is an authenticated PHP object injection vulnerability in BazarImportAction via unserialize. This issue has been patched in version 4.6.6...

CVE-2026-52777

CVE-2026-52777 affects YesWiki (a PHP wiki system) prior to version 4.6.6 . The vulnerability is an authenticated PHP object injection in BazarImportAction via an unrestricted unserialize() call in tools/bazar/services/CSVManager.php::importEntry(), which lacks the ['allowed_classes' => false]...

CVE-2026-52777 YesWiki: Authenticated PHP Object Injection in BazarImportAction via unserialize

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, there is an authenticated PHP object injection vulnerability in BazarImportAction via unserialize. This issue has been patched in version 4.6.6...

EUVD-2026-71808

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, there is an authenticated PHP object injection vulnerability in BazarImportAction via unserialize. This issue has been patched in version 4.6.6...

CVE-2026-52777 YesWiki: Authenticated PHP Object Injection in BazarImportAction via unserialize

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, there is an authenticated PHP object injection vulnerability in BazarImportAction via unserialize. This issue has been patched in version 4.6.6...