Browse CVEs

MEDIUM 5.4 CVE-2026-31313 An authenticated stored cross-site scripting (XSS) vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to execute arbit… Feehi Cms No fix yet Fix from $1,6002026-04-06 MEDIUM 5.4 CVE-2026-31352 An authenticated stored cross-site scripting (XSS) vulnerability in the Role Management module of Feehi CMS v2.1.1 allows attackers to execute arbitr… Feehi Cms No fix yet Fix from $1,6002026-04-06 MEDIUM 5.4 CVE-2026-31353 An authenticated stored cross-site scripting (XSS) vulnerability in the Category module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web… Feehi Cms No fix yet Fix from $1,6002026-04-06 MEDIUM 5.4 CVE-2026-31354 Multiple authenticated stored cross-site scripting (XSS) vulnerabilities in the Permissions module of Feehi CMS v2.1.1 allows attackers to execute ar… Feehi Cms No fix yet Fix from $1,6002026-04-06 MEDIUM 5.4 CVE-2026-31350 An authenticated stored cross-site scripting (XSS) vulnerability in Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via in… Feehi Cms No fix yet Fix from $1,6002026-04-06 MEDIUM 6.5 CVE-2025-65657 FeehiCMS version 2.1.1 has a Remote Code Execution via Unrestricted File Upload in Ad Management. FeehiCMS version 2.1.1 allows authenticated remote … Feehicms No fix yet Fix from $1,6002025-12-02 MEDIUM 6.5 CVE-2025-63523 FeehiCMS version 2.1.1 fails to enforce server-side immutability for parameters that are presented to clients as "read-only." An authenticated attack… Feehicms No fix yet Fix from $1,6002025-12-01 MEDIUM 6.1 CVE-2025-63520 Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function (?r=user%2Fupdate). Feehicms No fix yet Fix from $1,6002025-12-01 MEDIUM 5.4 CVE-2022-40000 Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the username field of the admin log in p… Feehicms No fix yet Fix from $1,6002022-12-15 MEDIUM 5.4 CVE-2022-40001 Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the title field of the create article pa… Feehicms No fix yet Fix from $1,6002022-12-15 MEDIUM 5.4 CVE-2022-40002 Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbirtary code via the callback parameter to /cms/notify. Feehicms No fix yet Fix from $1,6002022-12-15 MEDIUM 5.4 CVE-2022-40373 Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 allows remote attackers to run arbitrary code via upload of crafted XML file. Feehicms No fix yet Fix from $1,6002022-12-15 MEDIUM 6.1 CVE-2020-20589 Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag. Feehicms No fix yet Fix from $1,6002022-12-15 MEDIUM 6.1 CVE-2020-36607 Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag. Feehicms No fix yet Fix from $1,6002022-12-15 MEDIUM 6.1 CVE-2022-43320 FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /web/admin/index.php?r=log%2Fv… Feehicms No fix yet Fix from $1,6002022-11-09 MEDIUM 5.4 CVE-2022-40408 FeehiCMS v2.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted payload injected into the Comment box under the Si… Feehicms No fix yet Fix from $1,6002022-09-29 MEDIUM 6.1 CVE-2022-38796 A Host Header Injection vulnerability in Feehi CMS 2.1.1 may allow an attacker to spoof a particular header. This can be exploited by abusing passwor… Feehi Cms No fix yet Fix from $1,6002022-09-14 MEDIUM 5.4 CVE-2022-34140 A stored cross-site scripting (XSS) vulnerability in /index.php?r=site%2Fsignup of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts… Feehi Cms No fix yet Fix from $1,6002022-07-28 HIGH 8.8 CVE-2022-34971 An arbitrary file upload vulnerability in the Advertising Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary code via a craf… Feehi Cms No fix yet Fix from $1,9502022-07-27 MEDIUM 6.1 CVE-2020-19709 Insufficient filtering of the tag parameters in feehicms 0.1.3 allows attackers to execute arbitrary web or HTML via a crafted payload. Feehicms No fix yet Fix from $1,6002021-08-26 CRITICAL 9.1 CVE-2021-30108 Feehi CMS 2.1.1 is affected by a Server-side request forgery (SSRF) vulnerability. When the user modifies the HTTP Referer header to any url, the ser… Feehi Cms No fix yet Fix from $2,3002021-05-24 HIGH 7.2 CVE-2020-22643 Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. After an administrator logs in… Feehi Cms No fix yet Fix from $1,9502021-01-26 MEDIUM 6.1 CVE-2020-21146 Feehi CMS 2.0.8 is affected by a cross-site scripting (XSS) vulnerability. When the user name is inserted as JavaScript code, browsing the post will … Feehi Cms No fix yet Fix from $1,6002021-01-26