CVE-2025-11136

MediumCVSS 4.7

Published: 29/09/2025(UTC)Updated: 09/10/2026(UTC)Translated: 09/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

32th percentile - higher than 32% of all known CVEs

Summary

YiFang CMS up to 2.0.2 has an unrestricted file upload vulnerability in the webUploader function of app/app/controller/File.php in the Backend component. Manipulating the uploadpath argument allows remote attacks. The exploit has been published.

Risk Assessment

An attacker can upload malicious files to the server, potentially leading to remote code execution and full system compromise.

Recommendation

Upgrade YiFang CMS to the latest version and implement file type validation and upload directory restrictions.

Other vulnerabilities in YiFang CMS

CVE-2026-6633Low
A cross-site scripting flaw was discovered in Yifang CMS up to version 2.0.5 in the store function of plugins/yifang_backend_account/logic/admin/L_rbac_admin.php within the Extended Management Module component. Manipulating the Account argument results in script injection. The attack can be executed remotely and a public exploit is available.

Original NVD description (English source)

A flaw has been found in YiFang CMS up to 2.0.2. The impacted element is the function webUploader of the file app/app/controller/File.php of the component Backend. Executing manipulation of the argument uploadpath can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be used.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS