PT-2026-57030

Name of the Vulnerable Software and Affected Versions YesWiki versions prior to 4.6.6 Description YesWiki's public Bazar entry-listing APIs are subject to unauthenticated SQL injection. The issue occurs when the system processes numeric query filters; while the system escapes the filter value, it...