组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。
| 漏洞与影响对象 | 风险等级 | CVSS | EPSS | 利用情报 | 披露时间 | |
|---|---|---|---|---|---|---|
| YesWiki Archived Revision - Cross-Site Scripting | 中危 | — | — | PoCEXP | ||
| YesWiki Bazar Widget - Reflected XSS via 'id' Parameter | 中危 | — | — | PoCEXP | ||
| YesWiki - Cross-Site Scripting | 高危 | — | — | PoCEXP | ||
| YesWiki < 4.6.4 - Unauthenticated SQL Injection | 严重 | — | — | PoCEXP | ||
| YesWiki <= 4.5.1 - Cross-Site Scripting | 中危 | — | — | PoCEXP | ||
| YesWiki < 4.5.4 - Cross-Site Scripting | 中危 | — | — | PoCEXP | ||
| YesWiki Reflected XSS via File Upload | 高危 | — | — | PoCEXP | ||
| Yeswiki < 4.5.2 - Unauthenticated Path Traversal | 高危 | 8.6 | 12.7% | PoCEXP | ||
| YesWiki - Stored Cross-Site Scripting | 高危 | 7.2 | — | PoCEXP | ||
| YesWiki <2022-07-07 - Cross-Site Scripting | 中危 | 6.5 | — | PoCEXP | ||
| YesWiki <2022-07-07 - SQL Injection | 严重 | 10.0 | — | PoCEXP |