{"vulnerability": "CVE-2026-52774", "sightings": [{"uuid": "21a2466c-25b0-4a19-93e6-24a123fdf2c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52774", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-r5xw-gcgw-hwp5", "content": "", "creation_timestamp": "2026-07-09T22:35:10.218617Z"}, {"uuid": "9f17fc27-1335-4a8b-bd00-673429c8098a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52774.yaml", "content": "", "creation_timestamp": "2026-07-13T06:00:05.993853Z"}, {"uuid": "49da3809-18a4-4fcf-b728-7b7bf2cd0fac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52774.yaml", "content": "", "creation_timestamp": "2026-07-14T00:00:06.257782Z"}, {"uuid": "ebc0b1c7-d3cb-4254-a5ff-9a1d3a60cc8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52774.yaml", "content": "", "creation_timestamp": "2026-07-15T00:00:02.949915Z"}, {"uuid": "fe9bd7e3-5b62-4a99-8cdb-89ee6174b90b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52774.yaml", "content": "", "creation_timestamp": "2026-07-16T00:00:04.094713Z"}, {"uuid": "9a3e6022-8355-43ac-a19a-e8c7e5141cac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52774.yaml", "content": "", "creation_timestamp": "2026-07-17T00:00:07.008586Z"}, {"uuid": "bd304a8f-ec5b-48a2-bacd-39d72d2567e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "seen", "source": "https://t.me/GithubRedTeam/101272", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Reflected\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52774-YESWIKI-XSS\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xTerror\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-05 17:22:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\na reflected XSS vulnerability in YesWiki's Bazar widget handler.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-05T19:00:02.857623Z"}, {"uuid": "c7fdceee-1392-4e8c-ad6e-3a92c84dcbdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101272", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Reflected\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52774-YESWIKI-XSS\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xTerror\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-05 17:22:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\na reflected XSS vulnerability in YesWiki's Bazar widget handler.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-06T00:00:37.542696Z"}, {"uuid": "83e32526-ad26-46fd-8097-0fbfc856d1a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "seen", "source": "Telegram/Kn_b6ZfV_Zn3sftMYR5SsyU-8IQ4Qtei0GrxhBA123EDChM", "content": "", "creation_timestamp": "2026-09-06T08:00:06.254054Z"}, {"uuid": "ab77321d-0926-4b8f-b9c5-6708d55c92bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "published-proof-of-concept", "source": "Telegram/Kn_b6ZfV_Zn3sftMYR5SsyU-8IQ4Qtei0GrxhBA123EDChM", "content": "", "creation_timestamp": "2026-09-07T01:00:24.589351Z"}, {"uuid": "9fdd3531-88a1-45ff-871d-f1a913804ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv5bgoodor2x", "content": "CVE-2026-52774: YesWiki < 4.6.6 has a stored XSS via the Bazar widget's id parameter, exploitable without auth. CVSS 6.1. No patch confirmed. Update immediately or restrict access. Details: https://www.valtersit.com/cve/CVE-2026-52774/ #CVE #infosec #YesWiki", "creation_timestamp": "2026-09-10T05:00:38.754863Z"}, {"uuid": "14c45881-c95c-4ed4-a46e-8a369945e28b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117244981206462808", "content": "CVE-2026-52774: YesWiki < 4.6.6 has a stored XSS via the Bazar widget's id parameter, exploitable without auth. CVSS 6.1. No patch confirmed. Update immediately or restrict access. Details: https://www.valtersit.com/cve/CVE-2026-52774/ #CVE #infosec #YesWiki", "creation_timestamp": "2026-09-10T05:00:47.317104Z"}]}