FeehiCMS is vulnerable to Cross-Site Scripting (XSS)

中危 6.1CVE-2022-43320 · GHSA-3ppm-fwhm-qqg6 · Published 09/11/2022 · updated 17/06/2026

要点

CVE-2022-43320 是影响 feehi/cms, feehicms (feehi) 的中危 (CVSS 6.1)漏洞。
未来 30 天内被利用的概率（EPSS）：0.44%，高于 38.4% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
feehi/cms Packagist	`≤ 2.1.1`	No fix yet
feehicms feehi	`= 2.1.1`	No fix yet

Description

FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer.

NVD description

FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer.

References

nvd.nist.gov/vuln/detail/CVE-2022-43320 · ADVISORY
liufee/feehicms · WEB
liufee/cms · PACKAGE

feehi/cms 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

feehi/cms

Packagist

≤ 2.1.1

No fix yet

feehicms

feehi

= 2.1.1

No fix yet

Description

FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer.

NVD description

FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer.

feehi/cms 的其他漏洞

查看全部 →