CVE-2025-52277 - Cross Site Scripting vulnerability in YesWiki v.4.54 allows a remote attacker to execute arbitrary code via a crafted payload to the meta configuration robots field

Back Back to CVE browser

MEDIUM

Cross Site Scripting vulnerability in YesWiki v.4.54 allows a remote attacker to execute arbitrary code via a crafted payload to the meta configuration robots field

Published Sep 9, 2025

6.1

MEDIUM

CVSS 3.1

EPSS 0.39%

Description

Cross Site Scripting vulnerability in YesWiki v.4.54 allows a remote attacker to execute arbitrary code via a crafted payload to the meta configuration robots field

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (5)

http://yeswiki.com
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-27279
Advisory
https://github.com/advisories/GHSA-29cj-cxw4-v4j2
Advisory
https://github.com/nakkouchtarek/CVE/tree/main/CVE-2025-52277
exploitThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-52277

Link	Providers	Tags
http://yeswiki.com
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-27279		Advisory
https://github.com/advisories/GHSA-29cj-cxw4-v4j2		Advisory
https://github.com/nakkouchtarek/CVE/tree/main/CVE-2025-52277		exploitThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-52277