Description
YesWiki是一个用PHP编写的wiki系统。系统存在XSS漏洞，攻击者可以利用漏洞获取用户敏感信息
Yeswiki 存在XSS漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/advisories/GHSA-w59h-3x3q-3p6j
https://nvd.nist.gov/vuln/detail/cve-2025-46346
https://avd.aliyun.com/product?prod=yeswiki
https://www.miggo.io/vulnerability-database/cve/CVE-2026-34598
https://z0enix.medium.com/cve-2025-24017-unauthenticated-dom-based-xss-in-yeswiki-4-4-5-cbe478e45119
https://pentest-tools.com/vulnerabilities-exploits/yeswiki-reflected-xss-via-file-upload_28562
https://security.snyk.io/vuln/SNYK-PHP-YESWIKIYESWIKI-8651592
https://www.hws.com/help/tech/1875.html
https://app.opencve.io/cve/?vendor=yeswiki