CVE-2026-116206 | YesWiki up to 4.6.x Comment Rendering /api/comments cross site scripting

October 25, 2026 Yanac

A vulnerability classified as problematic was found in YesWiki up to 4.6.x. Affected by this vulnerability is an unknown functionality of the file /api/comments of the component Comment Rendering. Such manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-116206. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More