https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-3743.htmlhttps://patchthecve.com/cve/CVE-2026-3743.htmlWed, 17 Jun 2026 10:44:07 +0000LOW 3.5: A flaw has been found in YiFang CMS 2.0.5. This affects the function update of the file app/db/admin/D_singlePageGroup.php. Executing a manipulation of the argument Name can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used. Thhttps://patchthecve.com/cve/CVE-2026-3742.htmlhttps://patchthecve.com/cve/CVE-2026-3742.htmlWed, 17 Jun 2026 10:44:07 +0000LOW 3.5: A vulnerability was detected in YiFang CMS 2.0.5. The impacted element is the function update of the file app/db/admin/D_singlePage.php. Performing a manipulation of the argument Title results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may https://patchthecve.com/cve/CVE-2026-3741.htmlhttps://patchthecve.com/cve/CVE-2026-3741.htmlWed, 17 Jun 2026 10:44:07 +0000LOW 3.5: A security vulnerability has been detected in YiFang CMS 2.0.5. The affected element is the function update of the file app/db/admin/D_friendLink.php. Such manipulation of the argument linkName leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed pubhttps://patchthecve.com/cve/CVE-2026-2934.htmlhttps://patchthecve.com/cve/CVE-2026-2934.htmlWed, 17 Jun 2026 10:32:03 +0000LOW 2.4: A security vulnerability has been detected in YiFang CMS up to 2.0.5. This impacts the function update of the file app/db/admin/D_friendLinkGroup.php of the component Extended Management Module. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate the attachttps://patchthecve.com/cve/CVE-2026-2933.htmlhttps://patchthecve.com/cve/CVE-2026-2933.htmlWed, 17 Jun 2026 10:32:03 +0000LOW 2.4: A weakness has been identified in YiFang CMS up to 2.0.5. This affects the function update of the file app/db/admin/D_adManage.php of the component Extended Management Module. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. Thehttps://patchthecve.com/cve/CVE-2026-2932.htmlhttps://patchthecve.com/cve/CVE-2026-2932.htmlWed, 17 Jun 2026 10:32:03 +0000LOW 2.4: A security flaw has been discovered in YiFang CMS up to 2.0.5. The impacted element is the function update of the file app/db/admin/D_adPosition.php of the component Extended Management Module. Performing a manipulation of the argument name/index results in cross site scripting. The attack is possib