CVE-2026-2932 – YiFang CMS Extended Management D_adPosition.php update cross site scripting

CVE ID : CVE-2026-2932

Published : Feb. 22, 2026, 8:15 a.m. | 49 minutes ago

Description : A security flaw has been discovered in YiFang CMS up to 2.0.5. The impacted element is the function update of the file app/db/admin/D_adPosition.php of the component Extended Management Module. Performing a manipulation of the argument name/index results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.

Severity: 4.8 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…