Live › vulnerability › CVE-2026-116211
Go to dashboardYesWiki versions from 4.5.0 before 4.7.0 build an INSERT statement from the date_maj_fiche field of a Bazar entry-creation request without escaping it. An unauthenticated attacker can inject a sub-SELECT against the wiki_users table and read password hashes.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-25 14:41 UTC. All times on this page are UTC.
Sites running YesWiki 4.5.0 up to but not including 4.7.0 with the Bazar extension handling entry creation are exposed, and the sources describe default installs as affected without authentication. Sites already on 4.7.0 or later are not affected. Whether a Bazar form must exist for the injection path is unknown.
No product ranges from the sources yet.
4.5.0 through 4.6.x are in the affected range.4.7.0 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManager::save(), where the date_maj_fiche field of a Bazar entry-creation request is concatenated unescaped into an INSERT statement. Unauthenticated attackers on default installs can inject a sub-SELECT against wiki_users to exfiltrate password hashes.
This page as .md · .json · in your agent: get_signal("CVE-2026-116211")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.