FeehiCMS Cross Site Scripting vulnerability

MÉDIO 5.4CVE-2022-40001 · GHSA-gqgq-784q-v9xp · Published 15/12/2022 · updated 17/06/2026

Em resumo

CVE-2022-40001 é uma vulnerabilidade MÉDIO (CVSS 5.4) que afeta feehi/feehicms, feehicms (feehi).
Chance de exploração nos próximos 30 dias (EPSS): 0.53%, maior que 44.9% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
feehi/feehicms Packagist	`≤ 2.1.1`	No fix yet
feehicms feehi	`= 2.1.1`	No fix yet

Description

Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the title field of the create article page.

NVD description

Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the title field of the create article page.

References

nvd.nist.gov/vuln/detail/CVE-2022-40001 · ADVISORY
liufee/cms · WEB
liufee/cms · PACKAGE

Mais vulnerabilidades de feehi/feehicms

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

feehi/feehicms

Packagist

≤ 2.1.1

No fix yet

feehicms

feehi

= 2.1.1

No fix yet

Description

Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the title field of the create article page.

NVD description

Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the title field of the create article page.

Mais vulnerabilidades de feehi/feehicms

Ver tudo →