Sploit.io - Search

Product: Yada Wiki, version: >= n/a, <= 3.5

CVE-2025-66094

Severity: MEDIUM

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yada Wiki yada-wiki allows Stored XSS.This issue affects Yada Wiki: from n/a through 3.5.

CVSS Score: 6.5

Affected Products:

dmccan Yada Wiki - Versions: n/a

References:

https://patchstack.com/database/wordpress/plugin/yada-wiki/vulnerability/wordpress-yada-wiki-plugin-3-5-cross-site-scripting-xss-vulnerability?_s_id=cve