HIGH8.8

GHSA-jxg9-2ch7-f552

Feehi CMS arbitrary code execution via crafted PHP file

Details

An arbitrary file upload vulnerability in the Advertising Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary code via a crafted PHP file.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/feehi/cms

Introduced in: 0

No fixed version published yet for feehi/cms (composer). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2022-34971[ADVISORY]
https://github.com/liufee/cms/issues/62[WEB]
https://github.com/liufee/cms[PACKAGE]