CVE-2025-52277

Cross Site Scripting vulnerability in YesWiki v.4.54 allows a remote attacker to execute arbitrary code via a crafted payload to the meta configuration robots field...

CVE-2025-52277

A Cross-Site Scripting (XSS) vulnerability exists in YesWiki v.4.54 , a PHP-based wiki system. The root cause is the improper neutralization of input during web page generation, specifically within the meta configuration robots field . A remote attacker can submit a crafted payload to this field,...