Vulnerabilities

TI-2026-05820 CVE-2026-6633 · GHSA-7gjf-f5f3-qqxw

Yifang CMS Extended Management L_rbac_admin.php store cross site scripting

MEDIUM 56

A security flaw has been discovered in Yifang CMS up to 2.0.5.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00253 Published 2026-04-20 No fix listed CWE-79

TI-2026-03233 CVE-2026-3743 · GHSA-v8m9-5jwp-92pf

YiFang CMS D_singlePageGroup.php update cross site scripting

MEDIUM 56

A flaw has been found in YiFang CMS 2.0.5.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00229 Published 2026-03-08 No fix listed CWE-79

TI-2026-03232 CVE-2026-3742 · GHSA-pwcm-mpvj-rqx4

YiFang CMS D_singlePage.php update cross site scripting

MEDIUM 56

A vulnerability was detected in YiFang CMS 2.0.5.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00229 Published 2026-03-08 No fix listed CWE-79

TI-2026-03231 CVE-2026-3741 · GHSA-2mx9-mg2h-r94x

YiFang CMS D_friendLink.php update cross site scripting

MEDIUM 56

A security vulnerability has been detected in YiFang CMS 2.0.5.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00229 Published 2026-03-08 No fix listed CWE-79

TI-2026-02527 CVE-2026-2934 · GHSA-786c-jm2j-j6xw

YiFang CMS Extended Management D_friendLinkGroup.php update cross site scripting

MEDIUM 55

A security vulnerability has been detected in YiFang CMS up to 2.0.5.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00306 Published 2026-02-22 No fix listed CWE-79

TI-2026-02526 CVE-2026-2933 · GHSA-3jg4-mfj9-3m8j

YiFang CMS Extended Management D_adManage.php update cross site scripting

LOW 22

A weakness has been identified in YiFang CMS up to 2.0.5.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00235 Published 2026-02-22 No fix listed CWE-79

TI-2026-02525 CVE-2026-2932 · GHSA-rm9x-gmj8-vfxh

YiFang CMS Extended Management D_adPosition.php update cross site scripting

LOW 22

A security flaw has been discovered in YiFang CMS up to 2.0.5.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.0026 Published 2026-02-22 No fix listed CWE-79

TI-2025-10204 CVE-2025-11136 · GHSA-32xq-c7f5-x98h

YiFang CMS Backend File.php webUploader unrestricted upload

MEDIUM 56

A flaw has been found in YiFang CMS up to 2.0.2.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00397 Published 2025-09-29 No fix listed CWE-284

TI-2025-08612 CVE-2025-9400 · GHSA-5q3f-j5cg-9xmv

YiFang CMS P_file.php mergeMultipartUpload unrestricted upload

MEDIUM 57

A flaw has been found in YiFang CMS up to 2.0.5.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00342 Published 2025-08-25 No fix listed CWE-284

TI-2025-08611 CVE-2025-9399 · GHSA-x9w6-w79w-w3r4

YiFang CMS L_tool.php sql injection

HIGH 65

A vulnerability was detected in YiFang CMS up to 2.0.5.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0035 Published 2025-08-25 No fix listed CWE-74

TI-2025-08610 CVE-2025-9398 · GHSA-r52m-38gf-wxcc

YiFang CMS Migrate.php exportInstallTable information disclosure

MEDIUM 64

A security vulnerability has been detected in YiFang CMS up to 2.0.5.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00507 Published 2025-08-24 No fix listed CWE-200

TI-2025-04835 CVE-2025-5383 · GHSA-w76q-396p-2mrw

Yifang CMS Article Management Module cross site scripting

MEDIUM 55

A vulnerability was found in Yifang CMS up to 2.0.2 and classified as problematic.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00287 Published 2025-05-31 No fix listed CWE-79

TI-2025-04833 CVE-2025-5381 · GHSA-cw9c-84f2-568f

Yifang CMS Admin Panel downloadFile path traversal

MEDIUM 56

A vulnerability, which was classified as problematic, was found in Yifang CMS up to 2.0.2.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00709 Published 2025-05-31 No fix listed CWE-22

Vulnerabilities

Filters