- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 14 · 13 medium
- Registry
- Packagist
Advisories 14
- CVE-2025-63523Medium 6.5
FeehiCMS version 2.1.1 fails to enforce server-side immutability for parameters that are presented to clients as "read-only." An…
Affected: versions 2.1.1.
- CVE-2025-63522Medium 4.6
Reverse Tabnabbing vulnerability in FeehiCMS 2.1.1 in the Comments Management function
Affected: through 2.1.1.
- CVE-2025-63520Medium 6.1
Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function (?r=user%2Fupdate).
Affected: versions 2.1.1.
- CVE-2022-40373Medium 5.4
Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 allows remote attackers to run arbitrary code via upload of crafted XML file.
Affected: through 2.1.1.
- CVE-2022-40002Medium 5.4
Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbirtary code via the callback parameter to…
Affected: through 2.1.1.
- CVE-2022-40001Medium 5.4
Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the title field of the create…
Affected: through 2.1.1.
- CVE-2022-40000Medium 5.4
Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the username field of the…
Affected: through 2.1.1.
- CVE-2021-36573Medium 5.4
File Upload vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via crafted image upload.
Affected: through 2.1.1.
- CVE-2021-36572Medium 6.1
Cross Site Scripting (XSS) vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via the user name field of the…
Affected: through 2.1.1.
- CVE-2020-36607Medium 6.1
Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html…
Affected: through 2.0.8.
- CVE-2020-20589Medium 6.1
Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html…
Affected: through 2.0.8.
- CVE-2022-4014Medium 4.3
FeehiCMS Post My Comment Tab cross-site request forgery
Affected: through 2.0.1.1.
- CVE-2022-40408Medium 5.4
FeehiCMS v2.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted payload injected into the Comment box…
Affected: through 2.0.1.1.
- CVE-2020-19709Unrated
Insufficient filtering of the tag parameters in feehicms 0.1.3 allows attackers to execute arbitrary web or HTML via a crafted payload.
Affected: through 0.1.3.