← Database

CVE-2025-31131

HIGH CVSS: 8.6 Published: 2025-04-01 Modified: 2026-06-17

Description

YesWiki is a wiki system written in PHP. The squelette parameter is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server. This vulnerability is fixed in 4.5.2.

Affected Platforms

Yeswiki Yeswiki

Weakness Type

CWE-22

References