CVE-2025-46550: Yeswiki Unauthenticated Reflected Cross-site Scripting Vulnerability
Summary
CVE-2025-46550: Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting. Affects yeswiki/yeswiki versions < 4.5.4. Fixed in 4.5.4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Yeswiki is an open-source wiki software that allows users to create and manage collaborative content easily. It provides features such as page editing, user management, and plugin support, making it a versatile tool for knowledge sharing. However, versions prior to 4.5.4 are vulnerable to a reflected cross-site scripting (XSS) attack, which can compromise user sessions and lead to unauthorized access.
Vulnerability Detail
The vulnerability arises from improper neutralization of user input during web page generation, specifically in the 'idformulaire' parameter of the '/?BazaR' endpoint. An attacker can exploit this flaw by crafting a malicious URL that injects a script into the page. When an unsuspecting user clicks on this link, the script executes in their browser, potentially allowing the attacker to steal cookies and hijack the user's session. The CVSS score for this vulnerability is 5.3, indicating a moderate severity level.
How To Fix
Minimum fixed version
4.5.4
This is the first release that contains the fix.
composer require yeswiki/yeswiki:4.5.4Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can implement input validation and output encoding for the 'idformulaire' parameter to prevent the execution of malicious scripts. This can be done by sanitizing user input before rendering it on the page.
Conclusion
The reflected XSS vulnerability in Yeswiki poses a significant risk to user security, allowing attackers to hijack sessions and potentially compromise sensitive information. It is crucial to update to version 4.5.4 or later to mitigate this risk. Additionally, implementing input validation and using tools like Vulert can help maintain the security of your applications.
See every vulnerability recorded for yeswiki/yeswiki →
FAQ
Reflected XSS is a type of attack where malicious scripts are injected into a web application and executed in the browser of a user who clicks on a crafted link.
An attacker can steal session cookies from authenticated users, allowing them to take over user accounts and perform unauthorized actions.
Yes, if you are using a version of Yeswiki prior to 4.5.4, you are vulnerable to this reflected XSS attack.
Implement input validation and output encoding as a temporary measure to mitigate the risk of exploitation until you can update.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software using just the composer.lock file. You can also check your application against known vulnerabilities using the Vulert playground without any signup.
References
Related vulnerabilities
Recent vulnerabilities recorded for yeswiki/yeswiki.
