Feehicms Security Vulnerabilities and Issues — Feehicms CVE List

Lucene search

FeehiFeehicms

8 matches found

CVE•added 2022/12/15 7:15 p.m.•63 views

CVE-2022-40001

Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the title field of the create article page.

5.4CVSS5.4AI score0.00046EPSS

CVE•added 2022/12/15 7:15 p.m.•63 views

CVE-2022-40002

Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbirtary code via the callback parameter to /cms/notify.

5.4CVSS5.3AI score0.00046EPSS

CVE•added 2022/12/15 7:15 p.m.•62 views

CVE-2020-36607

Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.

6.1CVSS6.1AI score0.00124EPSS

CVE•added 2022/12/15 7:15 p.m.•62 views

CVE-2022-40373

Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 allows remote attackers to run arbitrary code via upload of crafted XML file.

5.4CVSS5.4AI score0.0006EPSS

CVE•added 2022/12/15 7:15 p.m.•58 views

CVE-2022-40000

Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the username field of the admin log in page.

5.4CVSS5.4AI score0.00046EPSS

CVE•added 2022/12/15 7:15 p.m.•57 views

CVE-2021-36572

Cross Site Scripting (XSS) vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via the user name field of the login page.

6.1CVSS6AI score0.00077EPSS

CVE•added 2022/12/15 7:15 p.m.•56 views

CVE-2021-36573

File Upload vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via crafted image upload.

5.4CVSS5.7AI score0.00119EPSS

CVE•added 2022/12/15 7:15 p.m.•49 views

CVE-2020-20589

Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.

6.1CVSS6.1AI score0.00101EPSS