Lucene search
+L

242 matches found

OSV
OSV
added 2022/12/15 12:00 a.m.28 views

CVE-2022-40373

Cross Site Scripting XSS vulnerability in FeehiCMS 2.1.1 allows remote attackers to run arbitrary code via upload of crafted XML file...

5.4CVSS5.4AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2022/12/15 12:00 a.m.13 views

CVE-2022-40000

Cross Site Scripting XSS vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the username field of the admin log in page...

5.4AI score0.00506EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2022/12/15 12:00 a.m.9 views

CVE-2020-36607

Cross Site Scripting XSS vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag...

6.5AI score0.00639EPSS
SaveExploits1References1
CVE
CVE
added 2022/12/15 12:00 a.m.91 views

CVE-2022-40002

FeehiCMS 2.1.1 is affected. The vulnerability allows an attacker to execute arbitrary scripts via the callback parameter to the /cms/notify API, leading to XSS and potential browser-based actions. Root cause: unvalidated callback handling in the notify endpoint. Affected component: FeehiCMS-2.1.1...

5.4CVSS5.3AI score0.00506EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/12/15 12:00 a.m.20 views

FeehiCMS 跨站脚本漏洞

FeehiCMS is a Php based CMS builder by Liufee Personal Developer. A security vulnerability exists in FeehiCMS version 2.1.1. An attacker can exploit this vulnerability to execute arbitrary code via the username field on the login page...

6.1CVSS6.8AI score0.00423EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/12/15 12:00 a.m.16 views

FeehiCMS 跨站脚本漏洞

FeehiCMS is a Php based CMS builder by Liufee Personal Developer. A security vulnerability exists in FeehiCMS version 2.0.8. An attacker can exploit this vulnerability to execute arbitrary code via the lang attribute of the html tag...

6.1CVSS6.8AI score0.00583EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2022/12/15 12:00 a.m.35 views

CVE-2022-40001

Cross Site Scripting XSS vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the title field of the create article page...

5.6AI score0.00506EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/12/15 12:00 a.m.12 views

FeehiCMS 跨站脚本漏洞

FeehiCMS is a Php based CMS builder by Liufee Personal Developer. A security vulnerability exists in FeehiCMS version 2.0.8. An attacker can exploit this vulnerability to execute arbitrary code via the lang attribute of the html tag...

6.1CVSS6.8AI score0.00639EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2022/12/15 12:00 a.m.48 views

CVE-2022-40373

Cross Site Scripting XSS vulnerability in FeehiCMS 2.1.1 allows remote attackers to run arbitrary code via upload of crafted XML file...

5.6AI score0.00506EPSS
SaveExploits1References1
OSV
OSV
added 2022/12/15 12:00 a.m.23 views

CVE-2022-40002

Cross Site Scripting XSS vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbirtary code via the callback parameter to /cms/notify...

5.4CVSS5.3AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/11/16 12:00 p.m.32 views

Cross-Site Request Forgery in feehi/feehicms

FeehiCMS vulnerable to Cross-Site Request Forgery. Affected by this issue is some unknown functionality of the component Post My Comment Tab. The manipulation leads to cross-site request forgery. The attack may be launched remotely...

4.3CVSS5.1AI score0.00207EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/11/16 12:00 p.m.46 views

GHSA-CJP8-VV38-P3G2 Cross-Site Request Forgery in feehi/feehicms

FeehiCMS vulnerable to Cross-Site Request Forgery. Affected by this issue is some unknown functionality of the component Post My Comment Tab. The manipulation leads to cross-site request forgery. The attack may be launched remotely...

4.3CVSS4.5AI score0.00207EPSS
SaveExploits0References3
NVD
NVD
added 2022/11/16 8:15 a.m.31 views

CVE-2022-4014

A vulnerability, which was classified as problematic, has been found in FeehiCMS. Affected by this issue is some unknown functionality of the component Post My Comment Tab. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The identifier of this...

4.3CVSS0.00207EPSS
SaveExploits0References1
OSV
OSV
added 2022/11/16 8:15 a.m.14 views

CVE-2022-4014

A vulnerability, which was classified as problematic, has been found in FeehiCMS. Affected by this issue is some unknown functionality of the component Post My Comment Tab. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The identifier of this...

4.3CVSS5AI score0.00207EPSS
SaveExploits0References1
Prion
Prion
added 2022/11/16 8:15 a.m.28 views

Cross site request forgery (csrf)

A vulnerability, which was classified as problematic, has been found in FeehiCMS. Affected by this issue is some unknown functionality of the component Post My Comment Tab. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The identifier of this...

4.3CVSS4.5AI score0.00207EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/11/16 8:15 a.m.10 views

CVE-2022-4014

A vulnerability, which was classified as problematic, has been found in FeehiCMS. Affected by this issue is some unknown functionality of the component Post My Comment Tab. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The identifier of this...

4.3CVSS4.1AI score0.00207EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/11/16 12:00 a.m.11 views

FeehiCMS 跨站请求伪造漏洞

FeehiCMS is a Php-based CMS website builder by Liufee Personal Developer. A security vulnerability exists in FeehiCMS, which stems from an unknown feature of the component Post My Comment Tab being affected, which could lead to cross-site request forgery...

4.3CVSS4.7AI score0.00207EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2022/11/16 12:00 a.m.46 views

CVE-2022-4014 FeehiCMS Post My Comment Tab cross-site request forgery

A vulnerability, which was classified as problematic, has been found in FeehiCMS. Affected by this issue is some unknown functionality of the component Post My Comment Tab. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The identifier of this...

4.3CVSS4.9AI score0.00207EPSS
SaveExploits0References1
CVE
CVE
added 2022/11/16 12:00 a.m.80 views

CVE-2022-4014

FeehiCMS exposes a CSRF vulnerability in the Post My Comment Tab component (CVE-2022-4014). The issue affects FeehiCMS and can be exploited remotely via an unknown functionality of the Post My Comment Tab, per multiple sources. The CVE entry notes cross-site request forgery with a CVSS v3.1 base ...

4.3CVSS4.5AI score0.00207EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/11/16 12:00 a.m.12 views

PT-2022-25239 · Feehicms · Feehicms

Name of the Vulnerable Software and Affected Versions: FeehiCMS affected versions not specified Description: A problematic issue has been found in FeehiCMS, affecting some unknown functionality of the Post My Comment Tab component. This issue leads to cross-site request forgery and can be exploit...

4.3CVSS4.4AI score0.00207EPSS
SaveExploits0References5
Rows per page
Query Builder