Security Advisory

CVE-2026-2932

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-02-22 07:32:08

Last updated 2026-02-27 18:15:32

Assigner VulDB

State PUBLISHED

Description

A security flaw has been discovered in YiFang CMS up to 2.0.5. The impacted element is the function update of the file app/db/admin/D_adPosition.php of the component Extended Management Module. Performing a manipulation of the argument name/index results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.

← Browse all CVEs View on cve.org ↗