Threats tagged 'ghsa-4pf7-cc4r-g63h'

YesWiki versions prior to 4.6.6 contain an authenticated SQL injection vulnerability in the ReactionManager component. Authenticated users can exploit improper input handling in the deleteUserReaction() function, where URL path parameters are concatenated directly into a SQL LIKE clause without proper escaping. This allows arbitrary SQL injection, enabling full database read and write access, including extraction of user password hashes and emails.