FeehiCMS Cross Site Scripting vulnerability

MEDIO 5.4CVE-2022-40000 · GHSA-8vjp-hfgh-68rj · Published 15/12/2022 · updated 17/06/2026

En resumen

CVE-2022-40000 es una vulnerabilidad MEDIO (CVSS 5.4) que afecta a feehi/feehicms, feehicms (feehi).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.53%, mayor que el 44.9% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
feehi/feehicms Packagist	`≤ 2.1.1`	No fix yet
feehicms feehi	`= 2.1.1`	No fix yet

Description

Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the username field of the admin log in page.

NVD description

Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the username field of the admin log in page.

References

nvd.nist.gov/vuln/detail/CVE-2022-40000 · ADVISORY
liufee/cms · WEB
liufee/cms · PACKAGE

Más vulnerabilidades de feehi/feehicms

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

feehi/feehicms

Packagist

≤ 2.1.1

No fix yet

feehicms

feehi

= 2.1.1

No fix yet

Description

Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the username field of the admin log in page.

NVD description

Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the username field of the admin log in page.

Más vulnerabilidades de feehi/feehicms

Ver todo →