0xTerror/CVE-2026-52774-YESWIKI-XSS

PoC

a reflected XSS vulnerability in YesWiki's Bazar widget handler.

view exploit source poc_in_githubauthor 0xTerrorpublished 2026-09-05catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-52774US	—	0.66% (51st)	Exploit	2026-09-05
YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki's Bazar widget handler reflects the id GET parameter into HTML attributes using strip_tags() only. Because…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.