CVE-2026-116820

Versions of YesWiki from 4.6.0 before 4.7.0 are vulnerable to an information disclosure vulnerability. An unauthenticated attacker can append the showreq parameter to public Bazar listing API requests to view assembled SQL queries. This disclosure provides sensitive data, including table names , ...