242 matches found
EUVD-2025-200003
Cross Site Scripting XSS vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function ?r=user%2Fupdate...
FeehiCMS is vulnerable to cross-site scripting via the id parameter of the User Update function
Cross Site Scripting XSS vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function ?r=user%2Fupdate...
GHSA-QGC9-P7CJ-JVH6 FeehiCMS fails to enforce server-side immutability
FeehiCMS version 2.1.1 fails to enforce server-side immutability for parameters that are presented to clients as "read-only." An authenticated attacker can intercept and modify the parameter in transit and the backend accepts the changes. This can lead to unintended username changes...
GHSA-W756-RF26-7RMR FeehiCMS is vulnerable to reverse tabnabbing
Reverse Tabnabbing vulnerability in FeehiCMS 2.1.1 in the Comments Management function...
FeehiCMS is vulnerable to reverse tabnabbing
Reverse Tabnabbing vulnerability in FeehiCMS 2.1.1 in the Comments Management function...
EUVD-2025-200002
Reverse Tabnabbing vulnerability in FeehiCMS 2.1.1 in the Comments Management function...
CVE-2025-63520
Cross Site Scripting XSS vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function ?r=user%2Fupdate...
FeehiCMS 安全漏洞
FeehiCMS is a Php-based CMS website builder by Liufee Personal Developer. A security vulnerability exists in FeehiCMS version 2.1.1, which originates from a reverse tag hijacking issue in the Comments Management function...
CVE-2025-63520
Cross Site Scripting XSS vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function ?r=user%2Fupdate...
CVE-2025-63520
Cross Site Scripting XSS vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function ?r=user%2Fupdate...
PT-2025-48454
FeehiCMS version 2.1.1 fails to enforce server-side immutability for parameters that are presented to clients as "read-only." An authenticated attacker can intercept and modify the parameter in transit and the backend accepts the changes. This can lead to unintended username changes...
CVE-2025-63523
FeehiCMS version 2.1.1 fails to enforce server-side immutability for parameters that are presented to clients as "read-only." An authenticated attacker can intercept and modify the parameter in transit and the backend accepts the changes. This can lead to unintended username changes...
PT-2025-48453
Reverse Tabnabbing vulnerability in FeehiCMS 2.1.1 in the Comments Management function...
CVE-2025-63522
Reverse Tabnabbing vulnerability in FeehiCMS 2.1.1 in the Comments Management function...
FeehiCMS 安全漏洞
FeehiCMS is a Php-based CMS website builder by Liufee Personal Developer. A security vulnerability exists in FeehiCMS version 2.1.1, which originates from an unvalidated id parameter in the User Update function, which could lead to a cross-site scripting attack...
CVE-2025-63522
Reverse Tabnabbing vulnerability in FeehiCMS 2.1.1 in the Comments Management function...
CVE-2025-63522
FeehiCMS 2.1.1 is affected in the Comments Management function by a Reverse Tabnabbing issue. Attacker-controlled or manipulated link behavior in target="_blank" could enable phishing or session-hijacking-type effects as described in connected sources. The vulnerability is rated CVSS v3.1 base sc...
CVE-2025-63520
CVE-2025-63520 is an XSS vulnerability in FeehiCMS 2.1.1 exploitable via the id parameter in the User Update function (URL parameter ?r=user%2Fupdate). Multiple sources (NVD/Red Hat/Snyk and OSV variants) confirm a cross-site scripting flaw in this component. The Snyk report explicitly describes ...
FeehiCMS 安全漏洞
FeehiCMS is a Php-based CMS website builder by Liufee Personal Developer. A security vulnerability exists in FeehiCMS version 2.1.1, which stems from the server-side failure to implement immutability for read-only parameters, which could lead to user name modification...