CVE-2026-104460 | YesWiki up to 4.6.6 Bazar newtextsearch.php sql injection

October 2, 2026 Yanac

A vulnerability was found in YesWiki up to 4.6.6. It has been rated as critical. Affected by this vulnerability is an unknown functionality of the file actions/newtextsearch.php of the component Bazar. The manipulation leads to sql injection.

This vulnerability is referenced as CVE-2026-104460. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More