CVE-2025-31131

7.5 highEPSS 5.6%

High (7.5) in yeswiki yeswiki. EPSS 5.6% chance of exploitation in the next 30 days.

YesWiki is a wiki system written in PHP. The squelette parameter is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server. This vulnerability is fixed in 4.5.2.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 5.6% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-11-01)
CWE: CWE-22
Published: 2025-04-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

yeswiki:yeswiki

References

https://github.com/YesWiki/yeswiki/commit/f78c915369a60c74ab8f38561ae93a4aaca9b989
https://github.com/YesWiki/yeswiki/security/advisories/GHSA-w34w-fvp3-68xm

Check your stack JSON