CVE-2026-31350

Feehi CMS, v2.1.1, is affected by an authenticated stored XSS via the Page Sign parameter. The vulnerability allows an attacker to inject arbitrary scripts/HTML that execute in users’ browsers. Root cause is stored XSS in the Page Sign input; impact is confined to the affected web app and is desc...