Yifang CMS

Platform

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

April 20, 2026

Last Seen

April 20, 2026

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (1)

CVE-2026-6633: XSS Vulnerability in Yifang CMS Exposes Users to Remote Attacks

Apr 20·0 sources

Related Articles (2)

CVE-2026-6633 AKAOMA CVE VULNERABILITIES / 2h A security flaw has been discovered in Yifang CMS up to 2.0.5. The impacted element is the function store of the file plugins/yifang_backend_account/logic/admin/L_rbac_admin.php of the component Extended Management Module. The manipulation of the argument Account results in cross site scripting. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this discl

cve.akaoma.com·Apr 20

Ghsa 7gjf F5f3 Qqxw

db.gcve.eu·Apr 20

Related Entities

CVE-2026-6633 CWE-79 - Cross-site Scripting (xss)XSS