Beveiligingsadvies

CVE-2026-2932

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-02-22 07:32:08
Laatst bijgewerkt 2026-02-27 18:15:32
Toegewezen door VulDB
CVSS-score 4.8
Status PUBLISHED

Beschrijving

A security flaw has been discovered in YiFang CMS up to 2.0.5. The impacted element is the function update of the file app/db/admin/D_adPosition.php of the component Extended Management Module. Performing a manipulation of the argument name/index results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.