CVE-2020-21146

Feehi CMS 2.0.8 is affected by a cross-site scripting XSS vulnerability. When the user name is inserted as JavaScript code, browsing the post will trigger the XSS...

Privilege escalation

Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. After an administrator logs in, open the administrator image upload page to potentially upload malicious files...

Cross site scripting

Feehi CMS 2.0.8 is affected by a cross-site scripting XSS vulnerability. When the user name is inserted as JavaScript code, browsing the post will trigger the XSS...

CVE-2020-21146

CVE-2020-21146 affects Feehi CMS 2.0.8 with a cross-site scripting (XSS) vulnerability. The issue is triggered when a user name is inserted as JavaScript code and, upon browsing a post, the XSS can be executed. The provided connected documents confirm the vulnerability and its description across ...

CVE-2020-21146

Feehi CMS 2.0.8 is affected by a cross-site scripting XSS vulnerability. When the user name is inserted as JavaScript code, browsing the post will trigger the XSS...

CVE-2020-22643

Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability that can lead to remote code execution. The issue arises after an administrator logs in and uses the administrator image upload page to upload files, indicating post-auth file upload handling without sufficient validation. The ...

CVE-2020-22643

Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. After an administrator logs in, open the administrator image upload page to potentially upload malicious files...