MEDIUM4.3

GHSA-cjp8-vv38-p3g2

Cross-Site Request Forgery in feehi/feehicms

Details

FeehiCMS vulnerable to Cross-Site Request Forgery. Affected by this issue is some unknown functionality of the component Post My Comment Tab. The manipulation leads to cross-site request forgery. The attack may be launched remotely.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/feehi/feehicms

Introduced in: 0

No fixed version published yet for feehi/feehicms (composer). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2022-4014[ADVISORY]
https://github.com/liufee/feehicms[PACKAGE]
https://vuldb.com/?id.213788[WEB]