EUVD-2026-110529

YesWiki before 4.7.0 contains a path traversal vulnerability in BazarListeAction that allows unauthenticated attackers to select arbitrary templates within the @bazar Twig namespace via the template GET parameter. Attackers can append crafted template values to pages containing the bazarliste...

CVE-2026-116822

Versions of YesWiki prior to 4.7.0 are vulnerable to a path traversal flaw within the BazarListeAction component. This vulnerability allows unauthenticated attackers to select arbitrary templates within the @bazar Twig namespace by manipulating the template GET parameter. By appending crafted tem...