PT-2026-23949 · Unknown · Yifang Cms

Vuldb + 1 · Publicado 2026-03-08 · Atualizado 2026-03-08 · CVE-2026-3743

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions YiFang CMS version 2.0.5

Description A cross-site scripting issue exists in YiFang CMS version 2.0.5. The flaw is located in the update function of the file app/db/admin/D singlePageGroup.php. Manipulation of the Name argument can allow for the execution of malicious scripts. The issue is potentially exploitable remotely. The exploit has been published.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Code Injection

Enumeração de Fraquezas

CWE-79

CWE-94

Identificadores relacionados

CVE-2026-3743

Produtos afetados

Yifang Cms

Referências · 11

• 🔥 https://github.com/ZZCTD/CVE/issues/8 · Exploit
• https://vuldb.com/?id.349721 · Nota
• https://vuldb.com/?ctiid.349721 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-3743 · Nota de Segurança
• https://twitter.com/cyberbivash/status/2030680107153609149 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2030675289349464279 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2030747854105616461 · Publicação no Twitter
• https://t.me/cveNotify/154694 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2026-3743 · Aviso do Fabricante
• https://vuldb.com/?submit.767848 · Nota
• https://t.me/CVEtracker/46814 · Publicação no Telegram