CVE-2026-116202 | YesWiki up to 4.6.x Bazar BazaR ImageField image cross site scripting

October 25, 2026 Yanac

A vulnerability identified as problematic has been detected in YesWiki up to 4.6.x. The affected element is the function ImageField of the file BazaR of the component Bazar. Performing a manipulation of the argument image results in cross site scripting.

This vulnerability is reported as CVE-2026-116202. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More