CVE-2025-52277

Cross Site Scripting vulnerability in YesWiki v.4.54 allows a remote attacker to execute arbitrary code via a crafted payload to the meta configuration robots field

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2025-09-09

Last modified

2026-07-05

Weaknesses

CWE-79

Affected products

• Yeswiki (Yeswiki)

References

• https://github.com/nakkouchtarek/CVE/tree/main/CVE-2025-52277