[MEDIUM] Feehi CMS has authenticated stored cross-site scripting (XSS) vulnerabilities via the Permissions module

PKSA-rwph-3mr4-xjw2 CVE-2026-31354 GHSA-xqm9-6qmm-xrqh

Affected package: feehi/cms

Affected version: =2.1.1

Reported by:
GitHub