CVE-2026-116203

The YesWiki software, in versions prior to 4.7.0 , is vulnerable to a Stored Cross-Site Scripting (XSS) flaw within the filtertags action. The root cause is the lack of output encoding when the application echoes attacker-controlled token values. Specifically, anonymous attackers can inject marku...