Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-31313 EUVD-2026-19340GHSA-hj9c-p59c-vqph

Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the creation/editing module

Published Apr 6, 2026 · Updated Jul 5, 2026 · Assigned by mitre

Description

An authenticated stored cross-site scripting (XSS) vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Content field.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist feehi/cms 2.1.1 — GHSA-hj9c-p59c-vqph

References