-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| yeswiki/yeswiki | composer | < 4.5.2 | 4.5.2 |
PHPPHPMiggo AIRoot Cause AnalysisThe vulnerability exists in ThemeManager::loadTemplates where user-controlled parameters (theme/squelette/style) were used to construct filesystem paths without proper validation. The patch adds path sanitization checks and regex validation, confirming the original implementation was vulnerable. The function appears in stack traces when processing theme parameters and would be involved during exploitation as it handles the vulnerable 'squelette' input.
Ongoing coverage of React2Shell