Cross-site scripting in feehicms

2021-08-3016:22:25

Google

osv.dev

0.001 Low

EPSS

Percentile

43.3%

JSON

Insufficient filtering of the tag parameters in feehicms 0.1.3 allows attackers to execute arbitrary web or HTML via a crafted payload.

CPENameOperatorVersion
feehi/feehicmseq0.0.7
feehi/feehicmseq0.1.2
feehi/feehicmseq0.1.0
feehi/feehicmseq0.0.1
feehi/feehicmseq0.0.4
feehi/feehicmseq0.0.3
feehi/feehicmseq0.1.3
feehi/feehicmseq0.0.9
feehi/feehicmseq0.0.5
feehi/feehicmseq0.1.1

Name	Operator	Version
feehi/feehicms	eq	0.0.7
feehi/feehicms	eq	0.1.2
feehi/feehicms	eq	0.1.0
feehi/feehicms	eq	0.0.1
feehi/feehicms	eq	0.0.4
feehi/feehicms	eq	0.0.3
feehi/feehicms	eq	0.1.3
feehi/feehicms	eq	0.0.9
feehi/feehicms	eq	0.0.5
feehi/feehicms	eq	0.1.1