feehi/feehicms

14 results · Clear filters · Feed

• Medium 6.1
  CVE-2025-63520

  FeehiCMS is vulnerable to cross-site scripting via the id parameter of the User Update function

  Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function (?r=user%2Fupdate).

  feehi/feehicms Packagist
  Dec 1, 2025
• Medium 6.5
  CVE-2025-63523

  FeehiCMS fails to enforce server-side immutability

  FeehiCMS version 2.1.1 fails to enforce server-side immutability for parameters that are presented to clients as "read-only." An authenticated attacker can intercept and modify the parameter in transit and the backend accepts the changes. This can lead to uni…

  feehi/feehicms Packagist
  Dec 1, 2025
• Medium 4.6
  CVE-2025-63522

  FeehiCMS is vulnerable to reverse tabnabbing

  Reverse Tabnabbing vulnerability in FeehiCMS 2.1.1 in the Comments Management function

  feehi/feehicms Packagist
  Dec 1, 2025
• Medium 6.1
  CVE-2020-36607

  FeehiCMS Cross Site Scripting vulnerability

  Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.

  feehi/feehicms Packagist
  Dec 15, 2022
• Medium 6.1
  CVE-2020-20589

  FeehiCMS vulnerable to Cross Site Scripting

  Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.

  feehi/feehicms Packagist
  Dec 15, 2022
• Medium 5.4
  CVE-2022-40001

  FeehiCMS Cross Site Scripting vulnerability

  Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the title field of the create article page.

  feehi/feehicms Packagist
  Dec 15, 2022
• Medium 5.4
  CVE-2022-40000

  FeehiCMS Cross Site Scripting vulnerability

  Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the username field of the admin log in page.

  feehi/feehicms Packagist
  Dec 15, 2022
• Medium 5.4
  CVE-2022-40002

  FeehiCMS Cross Site Scripting vulnerability

  Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbirtary code via the callback parameter to /cms/notify.

  feehi/feehicms Packagist
  Dec 15, 2022
• Medium 5.4
  CVE-2022-40373

  FeehiCMS Cross Site Scripting vulnerability

  Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 allows remote attackers to run arbitrary code via upload of crafted XML file.

  feehi/feehicms Packagist
  Dec 15, 2022
• Medium 5.4
  CVE-2021-36573

  FeehiCMS Unrestricted Upload vulnerability

  File Upload vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via crafted image upload.

  feehi/feehicms Packagist
  Dec 15, 2022
• Medium 6.1
  CVE-2021-36572

  FeehiCMS Cross Site Scripting vulnerability

  Cross Site Scripting (XSS) vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via the user name field of the login page.

  feehi/feehicms Packagist
  Dec 15, 2022
• Medium 4.3
  CVE-2022-4014

  FeehiCMS Post My Comment Tab cross-site request forgery

  A vulnerability, which was classified as problematic, has been found in FeehiCMS. Affected by this issue is some unknown functionality of the component Post My Comment Tab. The manipulation leads to cross-site request forgery. The attack may be launched remot…

  feehi/feehicms Packagist
  Nov 16, 2022
• Medium 5.4
  CVE-2022-40408

  FeehiCMS vulnerable to Cross-Site scripting via crafted payload

  FeehiCMS v2.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted payload injected into the Comment box under the Single Page module.

  feehi/feehicms Packagist
  Sep 29, 2022
• Medium 6.1
  CVE-2020-19709

  Cross-site scripting in feehicms

  Insufficient filtering of the tag parameters in feehicms 0.1.3 allows attackers to execute arbitrary web or HTML via a crafted payload.

  feehi/feehicms Packagist
  Aug 26, 2021