Medium · 5.4 CVE-2022-40373 EUVD-2022-7778GHSA-xv8h-43h9-v3jq

FeehiCMS Cross Site Scripting vulnerability

Published Dec 15, 2022 · Updated Apr 21, 2025 · Assigned by mitre

Description

Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 allows remote attackers to run arbitrary code via upload of crafted XML file.

Ecosystem	Package	Affected	Fixed	Record
Packagist	feehi/feehicms	<= 2.1.1	—	GHSA-xv8h-43h9-v3jq