CVE-2026-104448 | YesWiki up to 4.6.6 Ajaxdeletepage ajaxdeletepage jsonp_callback cross-site request forgery

October 2, 2026 Yanac

A vulnerability was found in YesWiki up to 4.6.6 and classified as problematic. This affects the function ajaxdeletepage of the component Ajaxdeletepage Handler. Such manipulation of the argument jsonp_callback leads to cross-site request forgery.

This vulnerability is uniquely identified as CVE-2026-104448. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More