Feehicms@2.1.1 Security Vulnerabilities and Issues — Feehicms@2.1.1 CVE List

Lucene search

FeehiFeehicms2.1.1

6 matches found

CVE•added 2022/11/09 2:15 p.m.•72 views

CVE-2022-43320

FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer.

6.1CVSS6AI score0.00168EPSS

CVE•added 2022/12/15 7:15 p.m.•63 views

CVE-2022-40001

Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the title field of the create article page.

5.4CVSS5.4AI score0.00046EPSS

CVE•added 2022/12/15 7:15 p.m.•63 views

CVE-2022-40002

Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbirtary code via the callback parameter to /cms/notify.

5.4CVSS5.3AI score0.00046EPSS

CVE•added 2022/12/15 7:15 p.m.•62 views

CVE-2022-40373

Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 allows remote attackers to run arbitrary code via upload of crafted XML file.

5.4CVSS5.4AI score0.0006EPSS

CVE•added 2022/09/29 2:15 p.m.•61 views

CVE-2022-40408

FeehiCMS v2.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted payload injected into the Comment box under the Single Page module.

5.4CVSS5.2AI score0.00108EPSS

CVE•added 2022/12/15 7:15 p.m.•58 views

CVE-2022-40000

Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the username field of the admin log in page.

5.4CVSS5.4AI score0.00046EPSS