Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2026/04/07 5:12 a.m.•16 views

CVE-2026-31313

An authenticated stored cross-site scripting XSS vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Content field...

5.4CVSS6.2AI score0.00133EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2026/04/06 6:33 p.m.•19 views

Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the creation/editing module

An authenticated stored cross-site scripting XSS vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Content field...

5.4CVSS6.2AI score0.00133EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
•added 2026/04/06 6:33 p.m.•23 views

Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the creation/editing module

An authenticated stored cross-site scripting XSS vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Title parameter...

4.8CVSS6.2AI score0.00181EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2026/04/06 12:00 a.m.•26 views

PT-2026-30652

An authenticated stored cross-site scripting XSS vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Title parameter...

6.2AI score0.00181EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2026/04/06 12:00 a.m.•45 views

CVE-2026-31351

An authenticated stored cross-site scripting XSS vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Title parameter...

0.00181EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/06 12:00 a.m.•6 views

CVE-2026-31313: Improper Neutralization of Input During Web Page Generation

An authenticated stored cross-site scripting XSS vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Content field...

5.4CVSS6.2AI score0.00133EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/06 12:00 a.m.•7 views

CVE-2026-31351: Improper Neutralization of Input During Web Page Generation

An authenticated stored cross-site scripting XSS vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Title parameter...

4.8CVSS6.2AI score0.00181EPSS
SaveExploits1References1
Rows per page
Query Builder