Medium · 6.1 CVE-2025-63520 EUVD-2025-200003GHSA-c2vx-rx6x-m9wj

FeehiCMS is vulnerable to cross-site scripting via the id parameter of the User Update function

Published Dec 1, 2025 · Updated Dec 1, 2025 · Assigned by mitre

Description

Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function (?r=user%2Fupdate).

Ecosystem	Package	Affected	Fixed	Record
Packagist	feehi/feehicms	2.1.1	—	GHSA-c2vx-rx6x-m9wj