MEDIUM5.4
GHSA-xqm9-6qmm-xrqh
Feehi CMS has authenticated stored cross-site scripting (XSS) vulnerabilities via the Permissions module
Details
Multiple authenticated stored cross-site scripting (XSS) vulnerabilities in the Permissions module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Group, Category or Description parameters.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/feehi/cms
No fixed version published yet for feehi/cms (composer). Pin to a known-safe version or switch to an alternative.