GHSA-hxwq-9qc3-4972: SQL injection vulnerability in YesWiki

YesWiki versions before 4.7.0 contain a SQL injection vulnerability in despam.php. Authenticated administrators can use the from POST parameter to perform blind reads of the database, including user password hashes.