CVE-2026-6633: Cross Site Scripting in Yifang CMS Radar - Latest Security Threats / 2h A security flaw has been discovered in Yifang CMS up to 2.0.5. The impacted element is the function store of the file plugins/yifang_backend_account/logic/admin/L_rbac_admin.php of the component Extended Management Module. The manipulation of the argument Account results in cross site scripting. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The ve

A cross-site scripting (XSS) vulnerability exists in Yifang CMS versions up to 2. 0. 5 within the store function of the file plugins/yifang_backend_account/logic/admin/L_rbac_admin. php in the Extended Management Module. This vulnerability arises from improper handling of the Account argument, allowing remote attackers to execute script code in the context of the affected application. The vulnerability has a medium severity rating with a CVSS score of 5. 1. The vendor has not responded to disclosure attempts, and no official patch or remediation is currently available. Public exploit code has been released, increasing the risk of exploitation. No known exploits in the wild have been reported at this time.

CVE-2026-6633 is a cross-site scripting vulnerability in Yifang CMS up to version 2.0.5. It affects the store function in the Extended Management Module's admin logic file (plugins/yifang_backend_account/logic/admin/L_rbac_admin.php). The vulnerability is triggered by manipulation of the Account argument, which is not properly sanitized, enabling remote attackers to inject and execute malicious scripts. The vulnerability is remotely exploitable without requiring elevated privileges but does require user interaction. The vendor has not provided a fix or response, and no official remediation guidance is available.

Successful exploitation of this vulnerability allows an attacker to perform cross-site scripting attacks, potentially leading to the execution of arbitrary scripts in the context of the victim's browser. This can result in session hijacking, defacement, or other malicious actions performed on behalf of the user. Since the vulnerability is remotely exploitable and public exploit code is available, affected systems are at increased risk. However, no confirmed active exploitation in the wild has been reported.

No official patch or remediation is currently available from the vendor, and the vendor has not responded to disclosure attempts. Users of Yifang CMS versions up to 2.0.5 should consider implementing web application firewall (WAF) rules to detect and block malicious input targeting the Account parameter in the Extended Management Module. Additionally, restricting access to the affected module and monitoring for suspicious activity may reduce risk. Check the vendor's website or trusted security advisories regularly for any updates or official fixes.

A cross-site scripting (XSS) vulnerability exists in Yifang CMS versions up to 2. 0. 5 within the store function of the file plugins/yifang_backend_account/logic/admin/L_rbac_admin. php in the Extended Management Module. This vulnerability arises from improper handling of the Account argument, allowing remote attackers to execute script code in the context of the affected application. The vulnerability has a medium severity rating with a CVSS score of 5. 1. The vendor has not responded to disclosure attempts, and no official patch or remediation is currently available. Public exploit code has been released, increasing the risk of exploitation. No known exploits in the wild have been reported at this time.

Machine-generated threat intelligence

CVE-2026-6633 is a cross-site scripting vulnerability in Yifang CMS up to version 2.0.5. It affects the store function in the Extended Management Module's admin logic file (plugins/yifang_backend_account/logic/admin/L_rbac_admin.php). The vulnerability is triggered by manipulation of the Account argument, which is not properly sanitized, enabling remote attackers to inject and execute malicious scripts. The vulnerability is remotely exploitable without requiring elevated privileges but does require user interaction. The vendor has not provided a fix or response, and no official remediation guidance is available.

Successful exploitation of this vulnerability allows an attacker to perform cross-site scripting attacks, potentially leading to the execution of arbitrary scripts in the context of the victim's browser. This can result in session hijacking, defacement, or other malicious actions performed on behalf of the user. Since the vulnerability is remotely exploitable and public exploit code is available, affected systems are at increased risk. However, no confirmed active exploitation in the wild has been reported.

No official patch or remediation is currently available from the vendor, and the vendor has not responded to disclosure attempts. Users of Yifang CMS versions up to 2.0.5 should consider implementing web application firewall (WAF) rules to detect and block malicious input targeting the Account parameter in the Extended Management Module. Additionally, restricting access to the affected module and monitoring for suspicious activity may reduce risk. Check the vendor's website or trusted security advisories regularly for any updates or official fixes.

Threat ID: 69e6271719fe3cd2cdf8df97

Added to database: 4/20/2026, 1:16:07 PM

Last enriched: 4/20/2026, 1:31:07 PM

Last updated: 4/20/2026, 2:16:34 PM

Crowdsource mitigation strategies, intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Instant breach scanning across billions of leaked records. Free tier available.