Feehi CMS vulnerable to Cross-site Scripting in Username Field

2022-05-2417:40:05

Google

osv.dev

0.001 Low

EPSS

Percentile

37.3%

JSON

Feehi CMS 2.0.8 is affected by a cross-site scripting (XSS) vulnerability. When the user name is inserted as JavaScript code, browsing the post will trigger the XSS.

CPENameOperatorVersion
feehi/cmseq0.0.9
feehi/cmseq1.0.0beta3
feehi/cmseq2.0.5.1
feehi/cmseq0.0.8
feehi/cmseq2.0.7
feehi/cmseq2.0.5
feehi/cmseq0.0.6
feehi/cmseq1.0.0alpha2
feehi/cmseq0.0.3
feehi/cmseq1.0.0beta1

Name	Operator	Version
feehi/cms	eq	0.0.9
feehi/cms	eq	1.0.0beta3
feehi/cms	eq	2.0.5.1
feehi/cms	eq	0.0.8
feehi/cms	eq	2.0.7
feehi/cms	eq	2.0.5
feehi/cms	eq	0.0.6
feehi/cms	eq	1.0.0alpha2
feehi/cms	eq	0.0.3
feehi/cms	eq	1.0.0beta1