Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2026/04/07 5:12 a.m.4 views

CVE-2026-31350

An authenticated stored cross-site scripting XSS vulnerability in Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Page Sign parameter...

5.4CVSS6AI score0.00169EPSS
Exploits1References1
OSV
OSV
added 2026/04/06 6:33 p.m.1 views

GHSA-CGXR-V74V-G9MM Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the Page Sign parameter

An authenticated stored cross-site scripting XSS vulnerability in Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Page Sign parameter...

5.4CVSS6AI score0.00169EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2026/04/06 6:33 p.m.3 views

Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the Page Sign parameter

An authenticated stored cross-site scripting XSS vulnerability in Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Page Sign parameter...

5.4CVSS6AI score0.00169EPSS
Exploits1References4Affected Software1
EUVD
EUVD
added 2026/04/06 6:33 p.m.1 views

EUVD-2026-19341

An authenticated stored cross-site scripting XSS vulnerability in Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Page Sign parameter...

6AI score0.00169EPSS
Exploits1References3
Snyk
Snyk
added 2026/04/06 5:15 p.m.12 views

Cross-site Scripting (XSS)

Overview feehi/cms is a Feehi CMS project template. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Page Sign parameter. An attacker can execute arbitrary web scripts or HTML by injecting a crafted payload. Details Cross-site scripting or XSS is a code...

6.9CVSS6AI score0.00169EPSS
Exploits1References2
NVD
NVD
added 2026/04/06 4:16 p.m.1 views

CVE-2026-31350

An authenticated stored cross-site scripting XSS vulnerability in Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Page Sign parameter...

5.4CVSS0.00169EPSS
Exploits1References2
Cvelist
Cvelist
added 2026/04/06 12:0 a.m.21 views

CVE-2026-31350

An authenticated stored cross-site scripting XSS vulnerability in Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Page Sign parameter...

0.00169EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/04/06 12:0 a.m.6 views

FeehiCMS 安全漏洞

FeehiCMS is a PHP-based CMS website building system developed by Liufee’s individual developers. The FeehiCMS v2.1.1 version contains a security vulnerability. This vulnerability stems from a storage-type cross-site scripting issue with the Page Sign parameter, which may allow for the execution o...

5.4CVSS5.9AI score0.00169EPSS
Exploits1References2
CVE
CVE
added 2026/04/06 12:0 a.m.4 views

CVE-2026-31350

Feehi CMS, v2.1.1, is affected by an authenticated stored XSS via the Page Sign parameter. The vulnerability allows an attacker to inject arbitrary scripts/HTML that execute in users’ browsers. Root cause is stored XSS in the Page Sign input; impact is confined to the affected web app and is desc...

5.4CVSS6AI score0.00169EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/06 12:0 a.m.3 views

PT-2026-30651

An authenticated stored cross-site scripting XSS vulnerability in Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Page Sign parameter...

6AI score0.00169EPSS
Exploits1References3
Rows per page
Query Builder