CVE-2026-6633

CVE

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

April 20, 2026

Last Seen

April 20, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CVE-2026-6633: XSS Vulnerability in Yifang CMS Exposes Users to Remote Attacks51.9

A cross-site scripting (XSS) vulnerability, identified as CVE-2026-6633, has been discovered in Yifang CMS versions up to 2.0.5. The flaw resides in the store function of the file plugins/yifang_backend_account/logic/admin/L_rbac_admin.php within the Extended Management Module. Attackers can exploit...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

CVE-2026-6633: XSS Vulnerability in Yifang CMS Exposes Users to Remote Attacks

Apr 20·0 sources

Related Articles (2)

CVE-2026-6633 AKAOMA CVE VULNERABILITIES / 2h A security flaw has been discovered in Yifang CMS up to 2.0.5. The impacted element is the function store of the file plugins/yifang_backend_account/logic/admin/L_rbac_admin.php of the component Extended Management Module. The manipulation of the argument Account results in cross site scripting. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this discl

cve.akaoma.com·Apr 20

CVE-2026-6633: Cross Site Scripting in Yifang CMS Radar - Latest Security Threats / 2h A security flaw has been discovered in Yifang CMS up to 2.0.5. The impacted element is the function store of the file plugins/yifang_backend_account/logic/admin/L_rbac_admin.php of the component Extended Management Module. The manipulation of the argument Account results in cross site scripting. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The ve

radar.offseq.com·Apr 20

Related Entities

CWE-79 - Cross-site Scripting (xss)Yifang CMS XSS