CVE-2026-116827

YesWiki versions before 4.7.0 are vulnerable to a Server-Side Request Forgery (SSRF) flaw within the copyUrlToLocalFile() function of the Bazar CSV import feature. This vulnerability allows authenticated administrators to trigger arbitrary outbound requests by providing crafted URLs in CSV file o...