Skip to content

CVE record · 1 source

CVE-2026-104462

CVSS 7.5

YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar nuagetag action, which concatenates the unescaped tags attribute into a raw…

CVSS: 7.5

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

10

CVE NVD 29d ago

YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar nuagetag action, which concatenates the unescaped tags attribute into a raw…

YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar nuagetag action, which concatenates the unescaped tags attribute into a raw SQL IN clause. Attackers with page-write access (unauthenticated on default…

CVSS 7.5 CVE-2026-104462