CVE-2026-116204
Deferred Deferred - Pending Action

Cross-Site Request Forgery in YesWiki Prior to 4.7.0

Publication date: 2026-10-25

Last updated on: 2026-10-25

Assigner: VulnCheck

Description
YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action (tools/security/actions/despam.php) that lets unauthenticated attackers delete or restore pages through an administrator's session. Attackers can plant an auto-submitting raw HTML form on a wiki page, so an administrator who views it posts clean, suppr[], or rev[] parameters that delete PagePrincipale, configuration pages, or overwrite current content.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-25
Last Modified
2026-10-25
Generated
2026-10-25
AI Q&A
2026-10-25
EPSS Evaluated
N/A
NVD
CVE-2026-116204
EUVD
EUVD-2026-109462

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
YesWiki yeswiki 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-352 The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-116204 is a cross-site request forgery (CSRF) vulnerability in YesWiki versions before 4.7.0. It allows unauthenticated attackers to delete or restore wiki pages by tricking an administrator into viewing a malicious page with an auto-submitting HTML form. The form sends parameters like clean, suppr[], or rev[] to the despam admin action, which lacks CSRF protection.

Detection Guidance

Check YesWiki versions before 4.7.0 by running: grep -r 'version' /path/to/yeswiki/config/ or check the footer of your wiki pages. Inspect server logs for POST requests to /tools/security/actions/despam.php with parameters like clean, suppr[], or rev[]. Look for unexpected page deletions or restorations in the wiki history.

Impact Analysis

This vulnerability can lead to permanent loss of wiki pages, including critical ones like PagePrincipale or configuration pages. Attackers can overwrite content or restore old revisions, causing data integrity and availability issues. Recovery requires restoring from backups.

Mitigation Strategies

Upgrade YesWiki to version 4.7.0 or later if available. If no patch exists, disable the despam action by removing or renaming tools/security/actions/despam.php. Restrict write permissions by setting default_write_acl to a limited group in the wiki configuration. Disable raw HTML rendering by setting allow_raw_html to false.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-116204. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart