CVE-2026-116820Medium· 5.3▾ SunlitYesWiki from 4.6.0 before 4.7.0 contains an information disclosure vulnerability that allows unauthenticated attackers to view assembled SQL queries by adding the showreq parameter. Attackers can append showreq to public Bazar listing AP…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 27.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
YesWiki from 4.6.0 before 4.7.0 contains an information disclosure vulnerability that allows unauthenticated attackers to view assembled SQL queries by adding the showreq parameter. Attackers can append showreq to public Bazar listing API requests to obtain table names, JSON storage paths, ACL filter logic, and collation, aiding targeted SQL injection.
yeswiki >= 4.6.0 < 4.7.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116822Medium· 5.3YesWiki before 4.7.0 Template Traversal via BazarListeAction template Parameter
CVE-2026-116826Medium· 6.8YesWiki before 4.7.0 Authenticated SSRF via Page Duplication API downloadFile
CVE-2026-116824Medium· 6.1YesWiki before 4.7.0 Stored XSS via Referer Header in referrers_sites Handler
CVE-2026-116825Medium· 6.5YesWiki from 4.6.2 before 4.7.0 HTTP Signature Replay via ActivityPub Inbox
CVE-2026-116827Medium· 6.8YesWiki before 4.7.0 SSRF via copyUrlToLocalFile in Bazar CSV Import
CVE-2026-116823Medium· 6.1YesWiki before 4.7.0 Reflected XSS via BazarField $_REQUEST Fallback