CVE-2026-52772 | YesWiki up to 4.6.5 Bazar raw field.label/field.hint cross site scripting

September 5, 2026 Yanac

A vulnerability labeled as problematic has been found in YesWiki up to 4.6.5. Impacted is the function raw of the component Bazar. Such manipulation of the argument field.label/field.hint leads to cross site scripting.

This vulnerability is documented as CVE-2026-52772. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More