All vulnerabilities

Servers and applications

GHSA-w7cp-76pj-w4m5

SQL injection in the despam action via an unquoted INTERVAL operand

Severity
Medium 4.9
Published
12 Oct 2026
Last changed
12 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
4.7.0
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
YesWikiServers and applications · github:yeswiki/yeswiki
  • Every version before 4.7.0

References