YYiFang

Products

Exploited and recent CVEs

• CVE-2026-6633 Low 3.5 Yifang CMS Extended Management L_rbac_admin.php store cross site scripting 0.3%
• CVE-2026-3743 Low 3.5 YiFang CMS D_singlePageGroup.php update cross site scripting 0.2%
• CVE-2026-3742 Low 3.5 YiFang CMS D_singlePage.php update cross site scripting 0.2%
• CVE-2026-3741 Low 3.5 YiFang CMS D_friendLink.php update cross site scripting 0.2%
• CVE-2026-2934 Low 2.4 YiFang CMS Extended Management D_friendLinkGroup.php update cross site scripting 0.3%
• CVE-2026-2933 Low 2.4 YiFang CMS Extended Management D_adManage.php update cross site scripting 0.2%
• CVE-2026-2932 Low 2.4 YiFang CMS Extended Management D_adPosition.php update cross site scripting 0.3%
• CVE-2025-11136 Medium 4.7 YiFang CMS Backend File.php webUploader unrestricted upload 0.4%
• CVE-2025-9400 Medium 6.3 YiFang CMS P_file.php mergeMultipartUpload unrestricted upload 0.3%
• CVE-2025-9399 Medium 6.3 YiFang CMS L_tool.php sql injection 0.4%
• CVE-2025-9398 Medium 5.3 YiFang CMS Migrate.php exportInstallTable information disclosure 0.5%
• CVE-2025-5383 Low 2.4 Yifang CMS Article Management Module cross site scripting 0.3%
• CVE-2025-5381 Low 2.7 Yifang CMS Admin Panel downloadFile path traversal 0.7%