CVE-2026-2932 - YiFang CMS Extended Management D_adPosition.php update cross site scripting

CVE ID : CVE-2026-2932 Published : Feb. 22, 2026, 8:15 a.m. | 1 hour, 19 minutes ago Description : A security flaw has been discovered in YiFang CMS up to 2.0.5. The impacted element is the function update of the file app/db/admin/D_adPosition.php of the component Extended Management Module. Performing a manipulation of the argument name/index results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. Severity: 4.8 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...