Threats tagged 'ghsa-f8w7-2q27-5p28'

YesWiki versions prior to 4.6.7 contain an SQL injection vulnerability in the Bazar filtertags action. This flaw allows unauthenticated attackers to inject SQL code by exploiting improper handling of filterN attribute tokens, potentially exposing sensitive data such as password hashes. The vulnerability arises from unescaped tokens concatenated into a raw SQL IN clause, enabling a UNION-based SQL injection attack. The vulnerability has a high severity rating with a CVSS score of 8.6.