FeehiCMS is vulnerable to Cross-Site Scripting (XSS)

MEDIO 6.1CVE-2022-43320 · GHSA-3ppm-fwhm-qqg6 · Published 09/11/2022 · updated 17/06/2026

In breve

CVE-2022-43320 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda feehi/cms, feehicms (feehi).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.44%, superiore al 38.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
feehi/cms Packagist	`≤ 2.1.1`	No fix yet
feehicms feehi	`= 2.1.1`	No fix yet

Description

FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer.

NVD description

FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer.

References

nvd.nist.gov/vuln/detail/CVE-2022-43320 · ADVISORY
liufee/feehicms · WEB
liufee/cms · PACKAGE

Altre vulnerabilità di feehi/cms

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

feehi/cms

Packagist

≤ 2.1.1

No fix yet

feehicms

feehi

= 2.1.1

No fix yet

Description

FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer.

NVD description

FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer.

Altre vulnerabilità di feehi/cms

Vedi tutto →