YesWiki up to 4.6.x Despam despam.php despam action suppr[]/rev[] cross-site request forgery

Summaryinfo

A vulnerability classified as problematic was found in YesWiki up to 4.6.x. Impacted is the function despam action of the file tools/security/actions/despam.php of the component Despam. Executing a manipulation of the argument suppr[]/rev[] can lead to cross-site request forgery. The identification of this vulnerability is CVE-2026-116204. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability has been found in YesWiki up to 4.6.x and classified as problematic. This vulnerability affects the function despam action of the file tools/security/actions/despam.php of the component Despam. The manipulation of the argument suppr[]/rev[] with an unknown input leads to a cross-site request forgery vulnerability. The CWE definition for the vulnerability is CWE-352. The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request. As an impact it is known to affect integrity. CVE summarizes:

YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action (tools/security/actions/despam.php) that lets unauthenticated attackers delete or restore pages through an administrator's session. Attackers can plant an auto-submitting raw HTML form on a wiki page, so an administrator who views it posts clean, suppr[], or rev[] parameters that delete PagePrincipale, configuration pages, or overwrite current content.

The advisory is shared for download at github.com. This vulnerability was named CVE-2026-116204 since 10/25/2026. The exploitation appears to be easy. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Successful exploitation requires user interaction by the victim. There are known technical details, but no exploit is available.

By approaching the search of inurl:tools/security/actions/despam.php it is possible to find vulnerable targets with Google Hacking.

Upgrading to version 4.7.0 eliminates this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Content Management System

Name

• YesWiki

Version

• 4.0
• 4.1
• 4.2
• 4.3
• 4.4
• 4.5
• 4.6

Website

• Product: https://github.com/YesWiki/yeswiki/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion