All products

feehi/cms

Composer · Package
21 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the creation/editing moduleCVE-2026-31313 · GHSA-HJ9C-P59C-VQPH feehi/cms Composer Medium No fix reported
Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the Category moduleCVE-2026-31353 · GHSA-664P-J3Q6-P843 feehi/cms Composer Medium No fix reported
Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the Page Sign parameterCVE-2026-31350 · GHSA-CGXR-V74V-G9MM feehi/cms Composer Medium No fix reported
Feehi CMS has authenticated stored cross-site scripting (XSS) vulnerabilities via the Permissions moduleCVE-2026-31354 · GHSA-XQM9-6QMM-XRQH feehi/cms Composer Medium No fix reported
Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the Role Management moduleCVE-2026-31352 · GHSA-HQJC-WFVX-X2FV feehi/cms Composer Medium No fix reported
Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the creation/editing moduleCVE-2026-31351 · GHSA-CVJH-88C8-2JJX feehi/cms Composer Medium No fix reported
FeehiCMS Has a Remote Code Execution via Unrestricted File Upload in Ad ManagementCVE-2025-65657 · GHSA-MCXQ-54F4-MMX5 feehi/cms Composer Medium No fix reported
FeehiCMS is vulnerable to Cross-Site Scripting (XSS)CVE-2022-43320 · GHSA-3PPM-FWHM-QQG6 feehi/cms Composer Medium No fix reported
Arbitrary Code Execution in feehi/cmsCVE-2020-21322 · GHSA-RF3W-29H3-R636 feehi/cms Composer High Fix reported
FeehiCMS User[avatar] unrestricted uploadCVE-2024-8296 · GHSA-XP68-7G33-F49M feehi/cms Composer Medium No fix reported
FeehiCMS BannerForm[img] unrestricted uploadCVE-2024-8295 · GHSA-3WRG-6MG5-JG2V feehi/cms Composer Medium No fix reported
FeehiCMS file upload vulnerabilityCVE-2024-8294 · GHSA-XXQW-83C7-R24R feehi/cms Composer Medium No fix reported
Feehi CMS vulnerable to Cross-site Scripting in Username FieldCVE-2020-21146 · GHSA-V762-47VH-J7Q3 feehi/cms Composer Medium Fix reported
Feehi CMS Cross-site ScriptingCVE-2022-34140 · GHSA-25Q6-M425-9FQR feehi/cms Composer Medium No fix reported
Liufee CMS File Upload vulnerabilityCVE-2020-21489 · GHSA-6VF2-MFMR-QQQW feehi/cms Composer Critical Fix reported
Feehi CMS arbitrary file upload vulnerabilityCVE-2020-22643 · GHSA-65X8-9VGM-5FG5 feehi/cms Composer High No fix reported
Feehi CMS host header injection vulnerabilityCVE-2022-38796 · GHSA-4R4F-JRVW-H727 feehi/cms Composer Medium No fix reported
liufee CMS File Upload vulnerabilityCVE-2020-21174 · GHSA-Q3Q5-QVH5-CMW5 feehi/cms Composer Critical Fix reported
Server-Side Request Forgery in Feehi CMSCVE-2021-30108 · GHSA-GC45-J3M5-8QFQ feehi/cms Composer Critical No fix reported
Feehi CMS arbitrary code execution via crafted PHP fileCVE-2022-34971 · GHSA-JXG9-2CH7-F552 feehi/cms Composer High No fix reported