CVE-2026-86239 liufee FeehiCMS UEditor Widget UeditorAction.php init unrestricted upload

A vulnerability was identified in liufee FeehiCMS up to 2.1.1. The impacted element is the function UeditorAction::init of the file backend/widgets/ueditor/UeditorAction.php of the component UEditor Widget. The manipulation leads to unrestricted upload. Remote exploitation of the attack is...

CVE-2026-86239

liufee FeehiCMS (up to version 2.1.1 ) is affected by an unrestricted file upload vulnerability in the UEditor Widget component, specifically in the function UeditorAction::init within the file backend/widgets/ueditor/UeditorAction.php. The flaw allows remote, unauthenticated attackers to upload ...

CVE-2026-86239: Unrestricted Upload of File with Dangerous Type

A vulnerability was identified in liufee FeehiCMS up to 2.1.1. The impacted element is the function UeditorAction::init of the file backend/widgets/ueditor/UeditorAction.php of the component UEditor Widget. The manipulation leads to unrestricted upload. Remote exploitation of the attack is...