CVE-2026-116824 — Stored XSS via Referer Header in YesWiki before 4.7.0

YesWiki before 4.7.0 contains a stored cross-site scripting (XSS) vulnerability in handlers/page/referrers_sites.php. Unauthenticated attackers can inject scripts through crafted Referer headers.