CVE-2026-105224 | YesWiki up to 4.6.6 Bazar valeur action valeur.php cross site scripting

October 4, 2026 Yanac

A vulnerability labeled as problematic has been found in YesWiki up to 4.6.6. This impacts an unknown function of the file tools/bazar/actions/valeur.php of the component Bazar valeur action. Such manipulation leads to cross site scripting.

This vulnerability is traded as CVE-2026-105224. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More