Vulnerability Database

296,748

Total vulnerabilities in the database

CVE-2025-52277

Cross Site Scripting vulnerability in YesWiki v.4.5.4 allows a remote attacker to execute arbitrary code via a crafted payload to the meta configuration robots field.

Published: Sep 9, 2025
Updated: Sep 11, 2025
CVE: CVE-2025-52277
GHSA: GHSA-29cj-cxw4-v4j2
Severity: Medium
Exploit:

CVSS v3:

Severity: Unknown
Score:
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
yeswiki / yeswiki	-	4.5.4.x

http://yeswiki.com
https://github.com/nakkouchtarek/CVE/tree/main/CVE-2025-52277

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo