Feehicms Security Vulnerabilities and Issues — Feehicms CVE List

Lucene search

FeehiFeehicms

12 matches found

CVE•added 2022/11/09 2:15 p.m.•72 views

CVE-2022-43320

FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer.

6.1CVSS6AI score0.00168EPSS

CVE•added 2022/12/15 7:15 p.m.•63 views

CVE-2022-40001

Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the title field of the create article page.

5.4CVSS5.4AI score0.00046EPSS

CVE•added 2022/12/15 7:15 p.m.•63 views

CVE-2022-40002

Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbirtary code via the callback parameter to /cms/notify.

5.4CVSS5.3AI score0.00046EPSS

CVE•added 2022/12/15 7:15 p.m.•62 views

CVE-2020-36607

Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.

6.1CVSS6.1AI score0.00124EPSS

CVE•added 2022/12/15 7:15 p.m.•62 views

CVE-2022-40373

Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 allows remote attackers to run arbitrary code via upload of crafted XML file.

5.4CVSS5.4AI score0.0006EPSS

CVE•added 2022/09/29 2:15 p.m.•61 views

CVE-2022-40408

FeehiCMS v2.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted payload injected into the Comment box under the Single Page module.

5.4CVSS5.2AI score0.00108EPSS

CVE•added 2022/12/15 7:15 p.m.•58 views

CVE-2022-40000

Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the username field of the admin log in page.

5.4CVSS5.4AI score0.00046EPSS

CVE•added 2022/12/15 7:15 p.m.•57 views

CVE-2021-36572

Cross Site Scripting (XSS) vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via the user name field of the login page.

6.1CVSS6AI score0.00077EPSS

CVE•added 2022/12/15 7:15 p.m.•56 views

CVE-2021-36573

File Upload vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via crafted image upload.

5.4CVSS5.7AI score0.00119EPSS

CVE•added 2022/11/16 8:15 a.m.•52 views

CVE-2022-4014

A vulnerability, which was classified as problematic, has been found in FeehiCMS. Affected by this issue is some unknown functionality of the component Post My Comment Tab. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The identifier of this vulnerabilit...

4.3CVSS4.5AI score0.00063EPSS

CVE•added 2022/12/15 7:15 p.m.•49 views

CVE-2020-20589

Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.

6.1CVSS6.1AI score0.00101EPSS

CVE•added 2022/09/06 7:15 p.m.•42 views

CVE-2020-21516

There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8 at the head image upload, that allows attackers to execute relevant PHP code.

9.8CVSS9.6AI score0.00121EPSS