feehi/feehicms Security Advisories (14)
-
[MEDIUM] FeehiCMS is vulnerable to cross-site scripting via the id parameter of the User Update function
PKSA-cs8g-pn8z-dp8k CVE-2025-63520 GHSA-c2vx-rx6x-m9wj
Affected version: =2.1.1
Reported by:
GitHub -
[MEDIUM] FeehiCMS is vulnerable to reverse tabnabbing
PKSA-2tvw-ry46-vvzy CVE-2025-63522 GHSA-w756-rf26-7rmr
Affected version: <=2.1.1
Reported by:
GitHub -
[MEDIUM] FeehiCMS fails to enforce server-side immutability
PKSA-s4mw-3rsw-xxvp CVE-2025-63523 GHSA-qgc9-p7cj-jvh6
Affected version: =2.1.1
Reported by:
GitHub -
[MEDIUM] FeehiCMS Cross Site Scripting vulnerability
PKSA-dwyb-9wt2-9rpb CVE-2021-36572 GHSA-m54v-gv8p-9pqp
Affected version: <=2.1.1
Reported by:
GitHub -
[MEDIUM] FeehiCMS Unrestricted Upload vulnerability
PKSA-hq11-984b-2d93 CVE-2021-36573 GHSA-67mh-hw8v-x8v9
Affected version: <=2.1.1
Reported by:
GitHub -
[MEDIUM] FeehiCMS Cross Site Scripting vulnerability
PKSA-g98r-k7nw-vyrr CVE-2022-40000 GHSA-8vjp-hfgh-68rj
Affected version: <=2.1.1
Reported by:
GitHub -
[MEDIUM] FeehiCMS Cross Site Scripting vulnerability
PKSA-hh34-qydt-csy1 CVE-2022-40001 GHSA-gqgq-784q-v9xp
Affected version: <=2.1.1
Reported by:
GitHub -
[MEDIUM] FeehiCMS Cross Site Scripting vulnerability
PKSA-k5g5-55b8-hc62 CVE-2022-40002 GHSA-6vh6-72g6-xqx2
Affected version: <=2.1.1
Reported by:
GitHub -
[MEDIUM] FeehiCMS Cross Site Scripting vulnerability
PKSA-ppc7-gmvx-xht3 CVE-2022-40373 GHSA-xv8h-43h9-v3jq
Affected version: <=2.1.1
Reported by:
GitHub -
[MEDIUM] FeehiCMS vulnerable to Cross Site Scripting
PKSA-jxg1-1d9b-gw27 CVE-2020-20589 GHSA-pwh3-3pcm-6vjh
Affected version: <=2.0.8
Reported by:
GitHub -
[MEDIUM] FeehiCMS Cross Site Scripting vulnerability
PKSA-h1sb-8qvq-hbxs CVE-2020-36607 GHSA-6jj8-mqx2-7fg5
Affected version: <=2.0.8
Reported by:
GitHub -
[MEDIUM] Cross-Site Request Forgery in feehi/feehicms
PKSA-h6w7-ncnj-mw83 CVE-2022-4014 GHSA-cjp8-vv38-p3g2
Affected version: <=2.0.1.1
Reported by:
GitHub -
[MEDIUM] FeehiCMS vulnerable to Cross-Site scripting via crafted payload
PKSA-cjsx-6xst-699d CVE-2022-40408 GHSA-5mqq-7g25-r4wx
Affected version: <=2.0.1.1
Reported by:
GitHub -
[MEDIUM] Cross-site scripting in feehicms
PKSA-m3j7-4tcd-55sj CVE-2020-19709 GHSA-f8pv-x7h8-687v
Affected version: <=0.1.3
Reported by:
GitHub