CVE-2025-46549: Yeswiki Unauthenticated Reflected Cross-site Scripting Vulnerability
Summary
CVE-2025-46549: Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting. Affects yeswiki/yeswiki versions < 4.5.4. Fixed in 4.5.4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Yeswiki is an open-source wiki software that allows users to create and manage collaborative content. It is designed to be user-friendly and flexible, enabling users to customize their wikis easily. However, versions prior to 4.5.4 are vulnerable to a reflected cross-site scripting (XSS) attack, which can compromise user sessions and allow attackers to inject malicious scripts.
Vulnerability Detail
The vulnerability arises from improper neutralization of user input during web page generation, specifically in the 'template' parameter of the endpoint '/?BazaR/bazariframe'. Attackers can exploit this flaw by crafting a malicious URL that includes a script payload, such as '<script>alert(1)</script>'. When a user clicks on this link, the script executes in their browser, potentially allowing attackers to steal cookies or manipulate the website's content. The CVSS score for this vulnerability is 5.3, indicating a moderate severity level.
How To Fix
Minimum fixed version
4.5.4
This is the first release that contains the fix.
composer require yeswiki/yeswiki:4.5.4Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can implement input validation and output encoding for the 'template' parameter to prevent the execution of malicious scripts. However, this is not a permanent fix and updating to the latest version is recommended.
Conclusion
The Yeswiki software is vulnerable to an unauthenticated reflected cross-site scripting attack in versions prior to 4.5.4. It is crucial for users to update to the latest version to protect against potential exploits. Implementing input validation can serve as a temporary measure, but updating is the most effective solution.
See every vulnerability recorded for yeswiki/yeswiki →
FAQ
Reflected XSS is a type of attack where malicious scripts are injected into a web application and executed in the user's browser, often through a crafted URL.
Attackers can create a malicious link that includes a script payload. When a user clicks the link, the script runs in their browser, potentially stealing cookies or session information.
The impacts include session hijacking, unauthorized access to user accounts, website defacement, and the embedding of malicious content.
Yes, you can use Vulert, which monitors open-source vulnerabilities in your software. You can check your application for this vulnerability using the Vulert playground at Vulert Scanner without any signup.
If an immediate update is not possible, implement input validation and output encoding as a temporary workaround to mitigate the risk.
References
Related vulnerabilities
Recent vulnerabilities recorded for yeswiki/yeswiki.
