YesWiki vulnerabilities

YesWiki before 4.6.4 has an unauthenticated SQL injection in the Bazar form-import path, allowing any visitor to inject arbitrary SQL into an INSERT statement and read the full database, including password hashes.

YesWiki before version 4.6.6 contains an unsafe execution vulnerability in the Bazar form field calculator (CalcField.php), where the application attempts to sanitize mathematical formulas using a complex regular expression before passing them to eval(), which is vulnerable to ReDoS and can lead to arbitrary PHP code execution.

In YesWiki prior to version 4.6.0, a stored and blind XSS vulnerability was found in the form title field. An unauthenticated attacker can inject JavaScript that executes when other users visit the page.

A Cross Site Scripting (XSS) vulnerability in YesWiki v.4.54 allows a remote attacker to execute arbitrary code via a crafted payload in the meta configuration robots field.