Lucene search
+L

242 matches found

CNVD
CNVD
added 2022/11/11 12:00 a.m.54 views

FeehiCMS Cross-Site Scripting Vulnerability (CNVD-2022-78143)

FeehiCMS is a Php-based CMS website builder for individual developers. feehiCMS version v2.1.1 has a security vulnerability that originates from an id parameter on /web/admin/index.php?r=log/view-layer found to contain a reflective cross-site scripting XSS vulnerability. No detailed vulnerability...

6.1CVSS1.8AI score0.00426EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
added 2022/11/09 7:02 p.m.35 views

FeehiCMS is vulnerable to Cross-Site Scripting (XSS)

FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer...

6.1CVSS5.7AI score0.00426EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/11/09 7:02 p.m.39 views

GHSA-3PPM-FWHM-QQG6 FeehiCMS is vulnerable to Cross-Site Scripting (XSS)

FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer...

6.1CVSS6AI score0.00426EPSS
SaveExploits1References3
NVD
NVD
added 2022/11/09 2:15 p.m.29 views

CVE-2022-43320

FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer...

6.1CVSS0.00426EPSS
SaveExploits1References1
Prion
Prion
added 2022/11/09 2:15 p.m.27 views

Cross site scripting

FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer...

5.8CVSS6AI score0.00426EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/11/09 12:00 a.m.20 views

PT-2022-26846 · Feehicms · Feehicms

Name of the Vulnerable Software and Affected Versions: FeehiCMS version 2.1.1 Description: A reflected cross-site scripting XSS issue was found in FeehiCMS. The vulnerability occurs via the id parameter at the "/web/admin/index.php?r=log%2Fview-layer" endpoint. This allows for potential XSS...

6.1CVSS5.9AI score0.00426EPSS
SaveExploits1References8
Cvelist
Cvelist
added 2022/11/09 12:00 a.m.35 views

CVE-2022-43320

FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer...

6.2AI score0.00426EPSS
SaveExploits1References1
CVE
CVE
added 2022/11/09 12:00 a.m.96 views

CVE-2022-43320

CVE-2022-43320 affects FeehiCMS v2.1.1 and is a reflected cross-site scripting (XSS) flaw exploitable via the id parameter in /web/admin/index.php?r=log/view-layer. The issue is documented across multiple feeds as a reflected XSS with no publicly provided patch/version fix in the connected source...

6.1CVSS6AI score0.00426EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2022/11/09 12:00 a.m.24 views

CVE-2022-43320

FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer...

6.1CVSS6.1AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2022/11/09 12:00 a.m.6 views

CVE-2022-43320

FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer...

6.2AI score0.00426EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/11/09 12:00 a.m.12 views

FeehiCMS 跨站脚本漏洞

FeehiCMS is a Php-based CMS website builder for individual developers. feehiCMS version v2.1.1 has a security vulnerability that originates from an id parameter on /web/admin/index.php?r=log/view-layer found to contain a reflective cross-site scripting XSS vulnerability. No detailed vulnerability...

6.1CVSS6AI score0.00426EPSS
SaveExploits1References2
Veracode
Veracode
added 2022/09/30 1:30 p.m.22 views

Cross-Site Scripting (XSS)

feehi/feehicms is vulnerable to cross-site scripting. The vulnerability exists when sending picture comments in single page module which allows an attacker to inject and execute arbitrary javascript via a crafted payload...

5.4CVSS5.5AI score0.00453EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2022/09/30 12:00 a.m.35 views

GHSA-5MQQ-7G25-R4WX FeehiCMS vulnerable to Cross-Site scripting via crafted payload

FeehiCMS versions 2.0.1.1 and prior contain a cross-site scripting XSS vulnerability via a crafted payload injected into the Comment box under the Single Page module. There are no patches and no known workarounds for this issue...

5.4CVSS5.2AI score0.00453EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2022/09/30 12:00 a.m.41 views

FeehiCMS vulnerable to Cross-Site scripting via crafted payload

FeehiCMS versions 2.0.1.1 and prior contain a cross-site scripting XSS vulnerability via a crafted payload injected into the Comment box under the Single Page module. There are no patches and no known workarounds for this issue...

5.4CVSS4.9AI score0.00453EPSS
SaveExploits1References3Affected Software1
CNVD
CNVD
added 2022/09/30 12:00 a.m.72 views

FeehiCMS Cross-Site Scripting Vulnerability

FeehiCMS is a Php-based CMS builder by Liufee's personal developer. feehiCMS version v2.1.1 has a security vulnerability that stems from the ability to inject carefully crafted payloads via the comment box under the single page module. No detailed vulnerability details are currently available...

5.4CVSS2.8AI score0.00453EPSS
SaveExploits1References1
NVD
NVD
added 2022/09/29 2:15 p.m.23 views

CVE-2022-40408

FeehiCMS v2.1.1 was discovered to contain a cross-site scripting XSS vulnerability via a crafted payload injected into the Comment box under the Single Page module...

5.4CVSS0.00453EPSS
SaveExploits1References1
Prion
Prion
added 2022/09/29 2:15 p.m.22 views

Cross site scripting

FeehiCMS v2.1.1 was discovered to contain a cross-site scripting XSS vulnerability via a crafted payload injected into the Comment box under the Single Page module...

4.9CVSS5.2AI score0.00453EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2022/09/29 1:33 p.m.26 views

CVE-2022-40408

FeehiCMS v2.1.1 was discovered to contain a cross-site scripting XSS vulnerability via a crafted payload injected into the Comment box under the Single Page module...

5.4CVSS5.3AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2022/09/29 1:33 p.m.7 views

CVE-2022-40408

FeehiCMS v2.1.1 was discovered to contain a cross-site scripting XSS vulnerability via a crafted payload injected into the Comment box under the Single Page module...

5.3AI score0.00453EPSS
SaveExploits1References1
CVE
CVE
added 2022/09/29 1:33 p.m.87 views

CVE-2022-40408

FeehiCMS v2.1.1 is affected by CVE-2022-40408, a cross-site scripting (XSS) vulnerability that can be triggered by a crafted payload entered into the Comment box of the Single Page module. The issue is explicitly described across multiple sources as an XSS in this area; CVSS base score is 5.4 (Me...

5.4CVSS5.2AI score0.00453EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder