Frequency
2
occurrences
First Seen
April 20, 2026
Last Seen
April 20, 2026
Related Threat Clusters
-
CVE-2026-6633: XSS Vulnerability in Yifang CMS Exposes Users to Remote Attacks
A cross-site scripting (XSS) vulnerability, identified as CVE-2026-6633, has been discovered in Yifang CMS versions up to 2.0.5. The flaw resides in the store function of the file…
3 articles · Updated April 20, 2026
Recent Intelligence Reports
- CVE-2026-6633 AKAOMA CVE VULNERABILITIES / 2h A security flaw has been discovered in Yifang CMS up to 2.0.5. The impacted element is the function store of the file plugins/yifang_backend_account/logic/admin/L_rbac_admin.php of the component Extended Management Module. The manipulation of the argument Account results in cross site scripting. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this discl — cve.akaoma.com · April 20, 2026
- Ghsa 7gjf F5f3 Qqxw — db.gcve.eu · April 20, 2026