Skip to content
OpenAdvisories

Vendor

liufee

3 known vulnerabilities.

Products

FeehiCMS 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-86241

    liufee FeehiCMS Cookie Validation main-local.php hard-coded key

    A weakness has been identified in liufee FeehiCMS up to 2.1.1. This impacts an unknown function of the file environments/prod/backend/config/main-local.php of the component Cookie Validation. This manipulation of the argument cookieValidationKey causes use of…

    liufee FeehiCMS
  • Medium 4.7
    CVE-2026-86240

    liufee FeehiCMS UEditor Uploader.php catchImage server-side request forgery

    A security flaw has been discovered in liufee FeehiCMS up to 2.1.1. This affects the function catchImage of the file backend/widgets/ueditor/Uploader.php of the component UEditor. The manipulation of the argument source[] results in server-side request forger…

    liufee FeehiCMS
  • Medium 5.3
    CVE-2026-86239

    liufee FeehiCMS UEditor Widget UeditorAction.php init unrestricted upload

    A vulnerability was identified in liufee FeehiCMS up to 2.1.1. The impacted element is the function UeditorAction::init of the file backend/widgets/ueditor/UeditorAction.php of the component UEditor Widget. The manipulation leads to unrestricted upload. Remot…

    liufee FeehiCMS