Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw has been found in YiFang CMS 2.0.5. This affects the function update of the file app/db/admin/D_singlePageGroup.php. Executing a manipulation of the argument Name can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-3743 A flaw has been found in YiFang CMS 2.0.5. This affects the function update of the file app/db/admin/D_singlePageGroup.php. Executing a manipulation of the argument Nam… https://www.cve.org/CVERecord?id=CVE-2026-3743
Post summary
A flaw affecting YiFang CMS 2.0.5’s update function in D_singlePageGroup.php has been disclosed, but no exploit details, patches, or active usage information are provided.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-3743 - YiFang CMS D_singlePageGroup.php update cross site scripting Intel Report: https://ift.tt/Je8BY6m
Post summary
Alert announces CVE-2026-3743, a cross‑site scripting vulnerability in YiFang CMS, but provides no PoC, exploit, patch, or active exploitation details.
CVE-2026-3743 Cross-Site Scripting in YiFang CMS 2.0.5 via Argument Name Manipulation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3743
Post summary
The entry announces a new XSS vulnerability (CVE‑2026‑3743) in YiFang CMS 2.0.5 that can be exploited via argument name manipulation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | yifangcms | yifang | 2.0.5 | - | - |