CVE-2025-46350: Yeswiki Authenticated Reflected Cross-site Scripting Vulnerability
Summary
CVE-2025-46350: Yeswiki Vulnerable to Authenticated Reflected Cross-site Scripting. Affects yeswiki/yeswiki versions < 4.5.4. Fixed in 4.5.4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Yeswiki is an open-source wiki software that allows users to create and manage collaborative content. It provides features such as page editing, user management, and customizable templates. However, versions prior to 4.5.4 are vulnerable to an authenticated reflected cross-site scripting (XSS) attack, which can compromise user sessions and lead to unauthorized access.
Vulnerability Detail
The vulnerability arises from improper handling of user input in the 'incomingurl' parameter of the '/?PagePrincipale%2Fdeletepage' endpoint. An attacker with admin access can exploit this flaw by injecting malicious scripts into the application, which are then reflected back to users. This can lead to session hijacking, defacement of the website, or embedding of malicious content, posing significant security risks.
How To Fix
Minimum fixed version
4.5.4
This is the first release that contains the fix.
composer require yeswiki/yeswiki:4.5.4Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, you can restrict access to the vulnerable endpoint for non-admin users to mitigate the risk of exploitation until the software is updated.
Conclusion
The CVE-2025-46350 vulnerability in Yeswiki poses significant risks due to its potential for XSS attacks. It is crucial for users to update to version 4.5.4 or later to mitigate these risks and ensure the security of their applications.
See every vulnerability recorded for yeswiki/yeswiki →
FAQ
Reflected XSS is a type of attack where malicious scripts are injected into a web application and executed in the context of a user's browser, often through crafted URLs.
An attacker with admin access can exploit this vulnerability by crafting a malicious URL that includes the payload.
The impacts include session hijacking, unauthorized access to user accounts, and the ability to deface the website or inject malicious content.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score of this vulnerability is 3.8, indicating a low severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for yeswiki/yeswiki.
