yifang vulnerabilities

CVEs whose affected-version data names the yifang package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-11136Medium· 4.7

1y ago

A flaw has been found in YiFang CMS up to 2.0.2

A flaw has been found in YiFang CMS up to 2.0.2. The impacted element is the function webUploader of the file app/app/controller/File.php of the component Backend. Executing manipulation of the argument uploadpath can lead to unrestricte…

▾ Sunlitwanglongcn · yifangEPSS 0.40%via NVD