MEDIUM5.4

GHSA-gqgq-784q-v9xp

FeehiCMS Cross Site Scripting vulnerability

Details

Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the title field of the create article page.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/feehi/feehicms

Introduced in: 0

No fixed version published yet for feehi/feehicms (composer). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2022-40001[ADVISORY]
https://github.com/liufee/cms/issues/65[WEB]
https://github.com/liufee/cms[PACKAGE]