CVE-2025-63520

Cross Site Scripting XSS vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function ?r=user%2Fupdate...

CVE-2025-63522

Reverse Tabnabbing vulnerability in FeehiCMS 2.1.1 in the Comments Management function...

CVE-2025-63523

FeehiCMS version 2.1.1 fails to enforce server-side immutability for parameters that are presented to clients as "read-only." An authenticated attacker can intercept and modify the parameter in transit and the backend accepts the changes. This can lead to unintended username changes...

FeehiCMS 安全漏洞

FeehiCMS is a Php-based CMS website builder by Liufee Personal Developer. A security vulnerability exists in FeehiCMS version 2.1.1, which stems from an insufficient file upload limit in the advertisement management, and may lead to remote code execution...

PT-2025-48783

Name of the Vulnerable Software and Affected Versions FeehiCMS version 2.1.1 Description FeehiCMS version 2.1.1 allows authenticated remote attackers to upload files that the server later executes without sufficient validation. An attacker can upload a crafted PHP file, causing the application or...

CVE-2025-65657

FeehiCMS version 2.1.1 has a Remote Code Execution via Unrestricted File Upload in Ad Management. FeehiCMS version 2.1.1 allows authenticated remote attackers to upload files that the server later executes or stores in an executable location without sufficient validation, sanitization, or executi...

CVE-2025-65657

CVE-2025-65657 affects FeehiCMS 2.1.1. A vulnerability in Ad Management allows authenticated remote attackers to upload files (e.g., crafted PHP) that the server may execute, causing remote code execution. The issue is tied to unrestricted file upload with insufficient validation. Exploitation de...

EUVD-2025-200001

FeehiCMS version 2.1.1 fails to enforce server-side immutability for parameters that are presented to clients as "read-only." An authenticated attacker can intercept and modify the parameter in transit and the backend accepts the changes. This can lead to unintended username changes...

GHSA-QGC9-P7CJ-JVH6 FeehiCMS fails to enforce server-side immutability

FeehiCMS version 2.1.1 fails to enforce server-side immutability for parameters that are presented to clients as "read-only." An authenticated attacker can intercept and modify the parameter in transit and the backend accepts the changes. This can lead to unintended username changes...

EUVD-2025-200003

Cross Site Scripting XSS vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function ?r=user%2Fupdate...

FeehiCMS is vulnerable to cross-site scripting via the id parameter of the User Update function

Cross Site Scripting XSS vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function ?r=user%2Fupdate...

GHSA-W756-RF26-7RMR FeehiCMS is vulnerable to reverse tabnabbing

Reverse Tabnabbing vulnerability in FeehiCMS 2.1.1 in the Comments Management function...

FeehiCMS is vulnerable to reverse tabnabbing

Reverse Tabnabbing vulnerability in FeehiCMS 2.1.1 in the Comments Management function...

EUVD-2025-200002

Reverse Tabnabbing vulnerability in FeehiCMS 2.1.1 in the Comments Management function...

CVE-2025-63520

Cross Site Scripting XSS vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function ?r=user%2Fupdate...

FeehiCMS 安全漏洞

FeehiCMS is a Php-based CMS website builder by Liufee Personal Developer. A security vulnerability exists in FeehiCMS version 2.1.1, which originates from a reverse tag hijacking issue in the Comments Management function...

CVE-2025-63520

Cross Site Scripting XSS vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function ?r=user%2Fupdate...

CVE-2025-63520

Cross Site Scripting XSS vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function ?r=user%2Fupdate...

CVE-2025-63523

FeehiCMS version 2.1.1 fails to enforce server-side immutability for parameters that are presented to clients as "read-only." An authenticated attacker can intercept and modify the parameter in transit and the backend accepts the changes. This can lead to unintended username changes...

FeehiCMS 安全漏洞

FeehiCMS is a Php-based CMS website builder by Liufee Personal Developer. A security vulnerability exists in FeehiCMS version 2.1.1, which originates from an unvalidated id parameter in the User Update function, which could lead to a cross-site scripting attack...