FeehiCMS is vulnerable to cross-site scripting via the id parameter of the User Update function

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2025-63520 · ADVISORY
• liufee/cms · WEB
• kiwi865/CVEs · WEB
• liufee/cms · PACKAGE

Lỗ hổng khác của feehi/feehicms

• CVE-2025-63523TRUNG BÌNH 6.5FeehiCMS version 2.1.1 fails to enforce server-side immutability for parameters that are presented to clients as "read-only." An authenticat…
• CVE-2025-63522TRUNG BÌNH 4.6Reverse Tabnabbing vulnerability in FeehiCMS 2.1.1 in the Comments Management function
• CVE-2022-40373TRUNG BÌNH 5.4Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 allows remote attackers to run arbitrary code via upload of crafted XML file.
• CVE-2022-40002TRUNG BÌNH 5.4Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbirtary code via the callback parameter to /cms/…
• CVE-2022-40001TRUNG BÌNH 5.4Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the title field of the create a…