MEDIUM5.4

GHSA-8vjp-hfgh-68rj

FeehiCMS Cross Site Scripting vulnerability

Details

Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the username field of the admin log in page.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/feehi/feehicms

Introduced in: 0

No fixed version published yet for feehi/feehicms (composer). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2022-40000[ADVISORY]
https://github.com/liufee/cms/issues/64[WEB]
https://github.com/liufee/cms[PACKAGE]