Skip to content
OpenAdvisories
Medium · 6.1 CVE-2020-21146 EUVD-2022-5305GHSA-v762-47vh-j7q3

Feehi CMS vulnerable to Cross-site Scripting in Username Field

Published Jan 21, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

Feehi CMS 2.0.8 is affected by a cross-site scripting (XSS) vulnerability. When the user name is inserted as JavaScript code, browsing the post will trigger the XSS.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist feehi/cms < 2.0.8.1 2.0.8.1 GHSA-v762-47vh-j7q3

References