Medium · 6.1 CVE-2020-36607 EUVD-2022-7532GHSA-6jj8-mqx2-7fg5

FeehiCMS Cross Site Scripting vulnerability

Published Dec 15, 2022 · Updated Apr 21, 2025 · Assigned by mitre

Description

Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.

Ecosystem	Package	Affected	Fixed	Record
Packagist	feehi/feehicms	<= 2.0.8	—	GHSA-6jj8-mqx2-7fg5