Yfcmf

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Yfcmf records in CISA KEV

No Yfcmf vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2020-14642 CVE-2020-23691 · GHSA-mpx7-jgr6-823w

MEDIUM 48

YFCMF v2.3.1 has a Remote Command Execution (RCE) vulnerability in the index.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03397 Published 2021-05-14 No fix listed

TI-2018-11780 CVE-2018-16431 · GHSA-7fj9-p2jg-7h57

MEDIUM 40

admin/admin/adminsave.html in YFCMF v3.0 allows CSRF to add an administrator account.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00845 Published 2018-09-04 No fix listed CWE-352

TI-2020-14641 CVE-2020-23689 · GHSA-v955-2jxq-2w4r

LOW 23

In YFCMF v2.3.1, there is a stored XSS vulnerability in the comments section of the news page.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00589 Published 2021-05-14 No fix listed CWE-79