Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

YiFang vulnerabilities

13 published CVEs name YiFang among the affected products.

Published CVEs
13
Last 12 months
7
Critical
0
Known exploited
0

Critical 0High 0Medium 13Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20256
  2. 20267

Newest CVEs

  • CVE-2026-6633

    Yifang CMS Extended Management L_rbac_admin.php store cross site scripting

    Yifang · CMS

    Medium5.1
  • CVE-2026-3743

    YiFang CMS D_singlePageGroup.php update cross site scripting

    YiFang · CMS

    Medium5.1
  • CVE-2026-3742

    YiFang CMS D_singlePage.php update cross site scripting

    YiFang · CMS

    Medium5.1
  • CVE-2026-3741

    YiFang CMS D_friendLink.php update cross site scripting

    YiFang · CMS

    Medium5.1
  • CVE-2026-2934

    YiFang CMS Extended Management D_friendLinkGroup.php update cross site scripting

    YiFang · CMS

    Medium4.8
  • CVE-2026-2933

    YiFang CMS Extended Management D_adManage.php update cross site scripting

    YiFang · CMS

    Medium4.8
  • CVE-2026-2932

    YiFang CMS Extended Management D_adPosition.php update cross site scripting

    YiFang · CMS

    Medium4.8
  • CVE-2025-11136

    YiFang CMS Backend File.php webUploader unrestricted upload

    YiFang · CMS

    Medium5.1
  • CVE-2025-9400

    YiFang CMS P_file.php mergeMultipartUpload unrestricted upload

    YiFang · CMS

    Medium5.3
  • CVE-2025-9399

    YiFang CMS L_tool.php sql injection

    YiFang · CMS

    Medium5.3