Vulnerabilities

TI-2026-23935 CVE-2026-31354 · GHSA-xqm9-6qmm-xrqh

Multiple authenticated stored cross-site scripting (XSS) vulnerabilities in the…

MEDIUM 58

Multiple authenticated stored cross-site scripting (XSS) vulnerabilities in the Permissions module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Gr…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00219 Published 2026-04-06 No fix listed CWE-79

TI-2026-23934 CVE-2026-31353 · GHSA-664p-j3q6-p843

An authenticated stored cross-site scripting (XSS) vulnerability in the Category module…

MEDIUM 58

An authenticated stored cross-site scripting (XSS) vulnerability in the Category module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name paramete…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00176 Published 2026-04-06 No fix listed CWE-79

TI-2026-23933 CVE-2026-31352 · GHSA-hqjc-wfvx-x2fv

An authenticated stored cross-site scripting (XSS) vulnerability in the Role Management…

MEDIUM 58

An authenticated stored cross-site scripting (XSS) vulnerability in the Role Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Role N…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00219 Published 2026-04-06 No fix listed CWE-79

TI-2026-23932 CVE-2026-31351 · GHSA-cvjh-88c8-2jjx

An authenticated stored cross-site scripting (XSS) vulnerability in the creation/editing…

LOW 21

An authenticated stored cross-site scripting (XSS) vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Title…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00188 Published 2026-04-06 No fix listed CWE-79

TI-2026-23931 CVE-2026-31350 · GHSA-cgxr-v74v-g9mm

An authenticated stored cross-site scripting (XSS) vulnerability in Feehi CMS v2.1.1…

MEDIUM 58

An authenticated stored cross-site scripting (XSS) vulnerability in Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Page Sign parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00176 Published 2026-04-06 No fix listed CWE-79

TI-2026-23929 CVE-2026-31313 · GHSA-hj9c-p59c-vqph

An authenticated stored cross-site scripting (XSS) vulnerability in the creation/editing…

MEDIUM 58

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00138 Published 2026-04-06 No fix listed CWE-79

TI-2022-18294 CVE-2022-38796 · GHSA-4r4f-jrvw-h727

A Host Header Injection vulnerability in Feehi CMS 2.1.1 may allow an attacker to spoof a…

LOW 28

A Host Header Injection vulnerability in Feehi CMS 2.1.1 may allow an attacker to spoof a particular header.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00614 Published 2022-09-14 No fix listed CWE-74

TI-2022-15059 CVE-2022-34140 · GHSA-25q6-m425-9fqr

A stored cross-site scripting (XSS) vulnerability in /index.php?r=site%2Fsignup of Feehi…

LOW 32

A stored cross-site scripting (XSS) vulnerability in /index.php?r=site%2Fsignup of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username field.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.04831 Published 2022-07-27 No fix listed CWE-79

TI-2022-15736 CVE-2022-34971 · GHSA-jxg9-2ch7-f552

An arbitrary file upload vulnerability in the Advertising Management module of Feehi CMS…

MEDIUM 41

An arbitrary file upload vulnerability in the Advertising Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary code via a crafted PHP file.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01278 Published 2022-07-27 No fix listed CWE-434

TI-2021-10658 CVE-2021-30108 · GHSA-gc45-j3m5-8qfq

Feehi CMS 2.1.1 is affected by a Server-side request forgery (SSRF) vulnerability.

MEDIUM 41

Feehi CMS 2.1.1 is affected by a Server-side request forgery (SSRF) vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01109 Published 2021-05-24 No fix listed CWE-918

TI-2020-14006 CVE-2020-21146 · GHSA-v762-47vh-j7q3

Feehi CMS 2.0.8 is affected by a cross-site scripting (XSS) vulnerability.

LOW 29

Feehi CMS 2.0.8 is affected by a cross-site scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00766 Published 2021-01-21 Fixed in 2.0.8.1 CWE-79

TI-2020-14362 CVE-2020-22643 · GHSA-65x8-9vgm-5fg5

Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially…

LOW 36

Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01994 Published 2021-01-21 No fix listed CWE-434

Vulnerabilities

Filters