YesWiki Unauthenticated Page Deletion

YesWiki, a PHP-based wiki system, is affected by a serious security flaw.

Prior to version 4.6.6, the {{erasespamedcomments}} wiki action allows any user with write access to delete arbitrary pages, including admin and user-owned pages, without authorization.

This issue has been patched in version 4.6.6.