CVE-2020-21146

CVE-2020-21146 affects Feehi CMS 2.0.8 with a cross-site scripting (XSS) vulnerability. The issue is triggered when a user name is inserted as JavaScript code and, upon browsing a post, the XSS can be executed. The provided connected documents confirm the vulnerability and its description across ...

CVE-2020-21146

Feehi CMS 2.0.8 is affected by a cross-site scripting XSS vulnerability. When the user name is inserted as JavaScript code, browsing the post will trigger the XSS...

CVE-2020-22643

Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability that can lead to remote code execution. The issue arises after an administrator logs in and uses the administrator image upload page to upload files, indicating post-auth file upload handling without sufficient validation. The ...

CVE-2020-22643

Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. After an administrator logs in, open the administrator image upload page to potentially upload malicious files...

CVE-2020-22643

Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. After an administrator logs in, open the administrator image upload page to potentially upload malicious files...

CVE-2020-21146: Improper Neutralization of Input During Web Page Generation

Feehi CMS 2.0.8 is affected by a cross-site scripting XSS vulnerability. When the user name is inserted as JavaScript code, browsing the post will trigger the XSS...

CVE-2020-22643: Unrestricted Upload of File with Dangerous Type

Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. After an administrator logs in, open the administrator image upload page to potentially upload malicious files...

PT-2021-10598

Name of the Vulnerable Software and Affected Versions: Feehi CMS version 2.0.8 Description: The issue is related to a cross-site scripting XSS vulnerability. When the user name is inserted as JavaScript code, browsing the post will trigger the XSS. Recommendations: For Feehi CMS version 2.0.8, as...

PT-2021-10774

Name of the Vulnerable Software and Affected Versions Feehi CMS versions 2.1.0 through 2.1.0 Description The issue allows for an arbitrary file upload, potentially resulting in remote code execution. This can be achieved by accessing the administrator image upload page after an administrator has...