Lucene search
+L

245 matches found

RedhatCVE
RedhatCVE
•added 2025/12/02 12:19 a.m.•17 views

CVE-2025-63520

Cross Site Scripting XSS vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function ?r=user%2Fupdate...

6.1CVSS6AI score0.0024EPSS
SaveExploits1References1
Snyk
Snyk
•added 2025/12/01 3:39 p.m.•10 views

Cross-site Scripting (XSS)

Overview feehi/cms is a Feehi CMS project template. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the id parameter in the User Update function. An attacker can execute arbitrary JavaScript code in the context of a user's browser by injecting malicious input...

6.1CVSS5.4AI score0.0024EPSS
SaveExploits1References2
OSV
OSV
•added 2025/12/01 3:30 p.m.•17 views

GHSA-C2VX-RX6X-M9WJ FeehiCMS is vulnerable to cross-site scripting via the id parameter of the User Update function

Cross Site Scripting XSS vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function ?r=user%2Fupdate...

6.1CVSS6AI score0.0024EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/12/01 3:30 p.m.•16 views

EUVD-2025-200003

Cross Site Scripting XSS vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function ?r=user%2Fupdate...

6.1CVSS5.5AI score0.0024EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2025/12/01 3:30 p.m.•23 views

FeehiCMS is vulnerable to cross-site scripting via the id parameter of the User Update function

Cross Site Scripting XSS vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function ?r=user%2Fupdate...

6.1CVSS5.8AI score0.0024EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2025/12/01 3:15 p.m.•17 views

CVE-2025-63520

Cross Site Scripting XSS vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function ?r=user%2Fupdate...

6.1CVSS0.0024EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/12/01 12:00 a.m.•21 views

PT-2025-48452

Cross Site Scripting XSS vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function ?r=user%2Fupdate...

6AI score0.0024EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/01 12:00 a.m.•2 views

CVE-2025-63520: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function ?r=user%2Fupdate...

6.1CVSS5.9AI score0.0024EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/12/01 12:00 a.m.•18 views

FeehiCMS 安全漏洞

FeehiCMS is a Php-based CMS website builder by Liufee Personal Developer. A security vulnerability exists in FeehiCMS version 2.1.1, which originates from an unvalidated id parameter in the User Update function, which could lead to a cross-site scripting attack...

6.1CVSS5.8AI score0.0024EPSS
SaveExploits1References3
OSV
OSV
•added 2025/12/01 12:00 a.m.•20 views

CVE-2025-63520

Cross Site Scripting XSS vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function ?r=user%2Fupdate...

6.1CVSS6AI score0.0024EPSS
SaveExploits1References4
CVE
CVE
•added 2025/12/01 12:00 a.m.•39 views

CVE-2025-63520

FeehiCMS version 2.1.1 is vulnerable to a Cross-Site Scripting (XSS) vulnerability due to an unvalidated id parameter in the User Update function (?r=user%2Fupdate). An attacker can inject malicious scripts into the application, which are then executed in the context of a user's browser. This cou...

6.1CVSS5.9AI score0.0024EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2025/12/01 12:00 a.m.•28 views

CVE-2025-63520

Cross Site Scripting XSS vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function ?r=user%2Fupdate...

0.0024EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/11/10 12:00 a.m.•20 views

PT-2025-45596

Name of the Vulnerable Software and Affected Versions SourceCodester Survey Application System version 1.0 Description A flaw exists in the SourceCodester Survey Application System that allows for SQL injection. This occurs through manipulation of the fullname argument within the save user/update...

7.5CVSS7.4AI score0.00478EPSS
SaveExploits1References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2012-0237

Malware in sbrugna...

7.5CVSS6.2AI score0.01757EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2019-3746

Malware in sbrugna...

6.1CVSS7.1AI score0.01536EPSS
SaveExploits6References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2020-0528

Malware in sbrugna...

7.2CVSS6.3AI score0.0106EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2022-26871

Malicious code in bioql PyPI...

7.6CVSS5.5AI score0.00831EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2022-26870

Malicious code in bioql PyPI...

7.6CVSS5.6AI score0.00932EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2022-0941

Malicious code in bioql PyPI...

5.4CVSS5.5AI score0.0087EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•24 views

EUVD-2023-49950

Malicious code in bioql PyPI...

3.6CVSS4.4AI score0.0024EPSS
SaveExploits1References2
Rows per page
Query Builder