- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 21 · 2 critical, 11 medium
- Registry
- Packagist
Advisories 21
- CVE-2026-31354Medium 5.4
Multiple authenticated stored cross-site scripting (XSS) vulnerabilities in the Permissions module of Feehi CMS v2.1.1 allows attackers to…
Affected: versions 2.1.1.
- CVE-2026-31353Medium 5.4
An authenticated stored cross-site scripting (XSS) vulnerability in the Category module of Feehi CMS v2.1.1 allows attackers to execute…
Affected: versions 2.1.1.
- CVE-2026-31352Medium 5.4
An authenticated stored cross-site scripting (XSS) vulnerability in the Role Management module of Feehi CMS v2.1.1 allows attackers to…
Affected: versions 2.1.1.
- CVE-2026-31351Medium 4.8
An authenticated stored cross-site scripting (XSS) vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to…
Affected: versions 2.1.1.
- CVE-2026-31350Medium 5.4
An authenticated stored cross-site scripting (XSS) vulnerability in Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or…
Affected: versions 2.1.1.
- CVE-2026-31313Medium 5.4
An authenticated stored cross-site scripting (XSS) vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to…
Affected: versions 2.1.1.
- CVE-2025-65657Medium 6.5
FeehiCMS version 2.1.1 has a Remote Code Execution via Unrestricted File Upload in Ad Management.
Affected: through 2.1.1.
- CVE-2024-8296Medium 5.3
FeehiCMS index.php insert unrestricted upload
Affected: through 2.1.1.
- CVE-2024-8295Medium 5.3
FeehiCMS index.php createBanner unrestricted upload
Affected: through 2.1.1.
- CVE-2024-8294Medium 5.3
FeehiCMS index.php update unrestricted upload
Affected: through 2.1.1.
- CVE-2020-21489Critical 9.8
File Upload vulnerability in Feehicms v.2.0.8 allows a remote attacker to execute arbitrary code via the…
Affected: fixed in 2.0.8.1.
- CVE-2020-21174Critical 9.8
File Upload vulenrability in liufee CMS v.2.0.7.1 allows a remote attacker to execute arbitrary code via the image suffix function.
Affected: fixed in 2.0.8.1.
- CVE-2022-43320Medium 6.1
FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at…
Affected: through 2.1.1.
- CVE-2022-38796Unrated
A Host Header Injection vulnerability in Feehi CMS 2.1.1 may allow an attacker to spoof a particular header.
Affected: through 2.1.1.
- CVE-2020-21516Unrated
There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8 at the head image upload, that allows attackers to execute relevant PHP…
Affected: fixed in 2.0.8.1.
Show all 21 advisoriesShow fewer advisories
- CVE-2022-34140Unrated
A stored cross-site scripting (XSS) vulnerability in /index.php?r=site%2Fsignup of Feehi CMS v2.1.1 allows attackers to execute arbitrary…
Affected: through 2.1.1.
- CVE-2022-34971Unrated
An arbitrary file upload vulnerability in the Advertising Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary code…
Affected: through 2.1.1.
- CVE-2020-21322Unrated
An arbitrary file upload vulnerability in Feehi CMS v2.0.8 and below allows attackers to execute arbitrary code via a crafted PHP file.
Affected: fixed in 2.0.8.1.
- CVE-2021-30108Unrated
Feehi CMS 2.1.1 is affected by a Server-side request forgery (SSRF) vulnerability.
Affected: through 2.1.1.
- CVE-2020-21146Unrated
Feehi CMS 2.0.8 is affected by a cross-site scripting (XSS) vulnerability.
Affected: fixed in 2.0.8.1.
- CVE-2020-22643Unrated
Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution.
Affected: through 2.1.0-beta.