CVE-2026-104462

YesWiki versions before 4.6.7 are vulnerable to an SQL injection within the Bazar nuagetag action. The root cause is the concatenation of unescaped tags attributes into a raw SQL IN clause. Attackers with page-write access (which is unauthenticated on default installations) can inject a tag endin...

PT-2026-104272

YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar nuagetag action, which concatenates the unescaped tags attribute into a raw SQL IN clause. Attackers with page-write access unauthenticated on default installs can embed a nuagetag tag ending in a backslash to break quote...

CVE-2026-104462: Improper Neutralization of Special Elements used in an SQL Command

YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar nuagetag action, which concatenates the unescaped tags attribute into a raw SQL IN clause. Attackers with page-write access unauthenticated on default installs can embed a nuagetag tag ending in a backslash to break quote...

PT-2026-99342

Name of the Vulnerable Software and Affected Versions Grav versions 1.7.x Grav versions 2.0.0 through 2.0.24 Description Page content created by a user with page-write permissions is rendered through a Twig sandbox that allowlists the get cookie function. This function returns any cookie sent wit...