CVE-2026-52771 | YesWiki up to 4.6.5 ApiController deletePage day sql injection

September 5, 2026 Yanac

A vulnerability identified as critical has been detected in YesWiki up to 4.6.5. This issue affects the function ApiController::deletePage of the component ApiController. This manipulation of the argument day causes sql injection.

This vulnerability is registered as CVE-2026-52771. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More