10 matches found
EUVD-2025-27279
Malicious code in bioql PyPI...
CVE-2025-52277
Cross Site Scripting vulnerability in YesWiki v.4.54 allows a remote attacker to execute arbitrary code via a crafted payload to the meta configuration robots field...
YesWiki Cross Site Scripting vulnerability
Cross Site Scripting vulnerability in YesWiki v.4.5.4 allows a remote attacker to execute arbitrary code via a crafted payload to the meta configuration robots field...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the robots field in the meta configuration. An attacker can execute arbitrary scripts in the context of the user's browser by submitting a specially crafted payload. Details Cross-site scripting or XSS is a...
GHSA-29CJ-CXW4-V4J2 YesWiki Cross Site Scripting vulnerability
Cross Site Scripting vulnerability in YesWiki v.4.5.4 allows a remote attacker to execute arbitrary code via a crafted payload to the meta configuration robots field...
CVE-2025-52277
Cross Site Scripting vulnerability in YesWiki v.4.54 allows a remote attacker to execute arbitrary code via a crafted payload to the meta configuration robots field...
CVE-2025-52277
Cross Site Scripting vulnerability in YesWiki v.4.54 allows a remote attacker to execute arbitrary code via a crafted payload to the meta configuration robots field...
CVE-2025-52277
CVE-2025-52277 is a Cross-Site Scripting (XSS) vulnerability in YesWiki v4.54. The issue arises from unsanitized input in the meta configuration’s robots field, allowing a remote attacker to execute arbitrary scripts in the user’s browser. Exploitation is performed via a crafted payload sent to t...
YesWiki 安全漏洞
YesWiki is a wiki system written in PHP by the French organization YesWiki. It is used to create and manage websites in a collaborative manner. A security vulnerability exists in YesWiki version 4.54, which stems from cross-site scripting in the meta configuration robots field and could lead to t...
CVE-2025-52277
Cross Site Scripting vulnerability in YesWiki v.4.54 allows a remote attacker to execute arbitrary code via a crafted payload to the meta configuration robots field...