https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T08:18:54.489539+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-104471 fkie_cve-2026-104471 2026-10-03T08:18:56.421827+00:00

YesWiki before 4.6.7 contains an unrestricted file upload vulnerability that allows authenticated admins to write remote files into the web-accessible files/ directory via Bazar CSV import preview. Attackers can import a CSV whose file or image field references a remote .php URL, which is saved without extension checks and executed as server-side code.

 https://vulnerability.circl.lu/vuln/ghsa-g4m2-8g7g-xw8c GHSA-g4m2-8g7g-xw8c 2026-10-03T08:18:56.421931+00:00

YesWiki before 4.6.7 contains an unrestricted file upload vulnerability that allows authenticated admins to write remote files into the web-accessible files/ directory via Bazar CSV import preview. Attackers can import a CSV whose file or image field references a remote .php URL, which is saved without extension checks and executed as server-side code.