CVE-2026-86239

liufee FeehiCMS (up to version 2.1.1 ) is affected by an unrestricted file upload vulnerability in the UEditor Widget component, specifically in the function UeditorAction::init within the file backend/widgets/ueditor/UeditorAction.php. The flaw allows remote, unauthenticated attackers to upload ...