CVE-2026-105224

MEDIUM 5.4

YesWiki before 4.6.7 Stored XSS via Bazar valeur Action

CVSS Score

5.4

EPSS Score

0.0%

EPSS Percentile

0th

YesWiki before 4.6.7 contains a cross-site scripting vulnerability in the Bazar valeur action that allows page editors to inject script by rendering unescaped HTML fetched from a remote URL. Attackers can point tools/bazar/actions/valeur.php at a controlled server returning BAZ_fiche_titre markup with an img onerror handler, executing script in every viewer's browser.

CWE	CWE-79
Vendor	yeswiki
Product	yeswiki
Published	Oct 4, 2026

Stay Ahead of the Next One

Get instant alerts for yeswiki yeswiki

Be the first to know when new medium vulnerabilities affecting yeswiki yeswiki are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Affected Versions

YesWiki / yeswiki

0 < 4.6.7

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/YesWiki/yeswiki/security/advisories/GHSA-6rvf-7pwm-6j44 github.com: https://github.com/YesWiki/yeswiki/commit/22a5260b0381824e01d340ce9457c4adb9e18b23 vulncheck.com: https://www.vulncheck.com/advisories/yeswiki-before-4.6.7-stored-xss-via-bazar-valeur-action

Credits

🔍 sondt99