CVE-2026-116211 | YesWiki 4.5.0/4.6.x Bazar PageManager::save date_maj_fiche sql injection

October 25, 2026 Yanac

A vulnerability was found in YesWiki 4.5.0/4.6.x and classified as critical. Affected by this issue is the function PageManager::save of the component Bazar. Executing a manipulation of the argument date_maj_fiche can lead to sql injection.

This vulnerability is tracked as CVE-2026-116211. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More