CVE-2026-116823 | YesWiki up to 4.6.x Bazar BazarField::getValue REQUEST cross site scripting

October 27, 2026 Yanac

A vulnerability was found in YesWiki up to 4.6.x. It has been classified as problematic. Affected is the function BazarField::getValue of the component Bazar. The manipulation of the argument Request leads to cross site scripting.

This vulnerability is traded as CVE-2026-116823. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More