YfcmfCVEs & Vulnerabilities
3 CVEs affecting Yfcmf products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
3 CVEs→ All vendors
Most Affected Products
yfcmf 3
CVE-2020-23691CRITICAL
YFCMF v2.3.1 has a Remote Command Execution (RCE) vulnerability in the index.php.
14 May 2021
9.8
CVSS
CVE-2020-23689MEDIUM
In YFCMF v2.3.1, there is a stored XSS vulnerability in the comments section of the news page.
14 May 2021
4.8
CVSS
CVE-2018-16431HIGH
admin/admin/adminsave.html in YFCMF v3.0 allows CSRF to add an administrator account.
4 Sep 2018
8.8
CVSS
← PrevPage 1 / 1Next →