← All advisories

High severity7.5NVD Advisory· Published Mar 25, 2022· Updated Jun 17, 2026

CVE-2021-43091

CVE-2021-43091

Description

An SQL Injection vlnerability exits in Yeswiki doryphore 20211012 via the email parameter in the registration form.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
yeswiki/yeswikiPackagist	< 4.1.0	4.1.0

Affected products

3

Yeswiki/Yeswiki2 versions
cpe:2.3:a:yeswiki:yeswiki:4.1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:yeswiki:yeswiki:4.1.0:*:*:*:*:*:*:*
- (no CPE)
ghsa-coords
pkg:composer/yeswiki/yeswiki
Range: < 4.1.0

Patches

Vulnerability mechanics

References

5

github.com/yeswiki/yeswiki/commit/c9785f9a92744c3475f9676a0d8f95de24750094nvdPatchThird Party AdvisoryWEB
huntr.dev/bounties/07f245a7-ee9f-4b55-a0cc-13d5cb1be6e0/nvdExploitPatchThird Party Advisory
github.com/advisories/GHSA-xgx2-332h-9x6qghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-43091ghsaADVISORY
huntr.dev/bounties/07f245a7-ee9f-4b55-a0cc-13d5cb1be6e0ghsaWEB

News mentions

0

No linked articles in our index yet.