feehi/cms vulnerabilities (Packagist)

21 vulnerabilities.

• feehi/cms Packagist Feehi CMS has authenticated stored cross-site scripting (XSS) vulnerabilities via the Permissions module CVE-2026-31354 5.4 MediumApril 6, 2026
• feehi/cms Packagist Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the Category module CVE-2026-31353 5.4 MediumApril 6, 2026
• feehi/cms Packagist Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the Role Management module CVE-2026-31352 5.4 MediumApril 6, 2026
• feehi/cms Packagist Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the creation/editing module CVE-2026-31351 4.8 MediumApril 6, 2026
• feehi/cms Packagist Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the Page Sign parameter CVE-2026-31350 5.4 MediumApril 6, 2026
• feehi/cms Packagist Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the creation/editing module CVE-2026-31313 5.4 MediumApril 6, 2026
• feehi/cms Packagist FeehiCMS Has a Remote Code Execution via Unrestricted File Upload in Ad Management CVE-2025-65657 6.5 MediumDecember 2, 2025
• feehi/cms Packagist FeehiCMS index.php insert unrestricted upload CVE-2024-8296 5.3 MediumAugust 29, 2024
• feehi/cms Packagist FeehiCMS index.php createBanner unrestricted upload CVE-2024-8295 5.3 MediumAugust 29, 2024
• feehi/cms Packagist FeehiCMS index.php update unrestricted upload CVE-2024-8294 5.3 MediumAugust 29, 2024
• feehi/cms Packagist Liufee CMS File Upload vulnerability CVE-2020-21489 Fix available 9.8 CriticalJune 20, 2023
• feehi/cms Packagist liufee CMS File Upload vulnerability CVE-2020-21174 Fix available 9.8 CriticalJune 20, 2023
• feehi/cms Packagist FeehiCMS is vulnerable to Cross-Site Scripting (XSS) CVE-2022-43320 6.1 MediumNovember 9, 2022
• feehi/cms Packagist Feehi CMS host header injection vulnerability CVE-2022-38796 6.1 MediumSeptember 14, 2022
• feehi/cms Packagist FeehiCMS has an arbitrary file upload vulnerability CVE-2020-21516 Fix available 9.8 CriticalSeptember 6, 2022
• feehi/cms Packagist Feehi CMS Cross-site Scripting CVE-2022-34140 Public exploit 5.4 MediumJuly 27, 2022
• feehi/cms Packagist Feehi CMS arbitrary code execution via crafted PHP file CVE-2022-34971 8.8 HighJuly 27, 2022
• feehi/cms Packagist Arbitrary Code Execution in feehi/cms CVE-2020-21322 Fix available 9.8 CriticalSeptember 15, 2021
• feehi/cms Packagist Server-Side Request Forgery in Feehi CMS CVE-2021-30108 9.1 CriticalMay 24, 2021
• feehi/cms Packagist Feehi CMS vulnerable to Cross-site Scripting in Username Field CVE-2020-21146 Fix available 6.1 MediumJanuary 21, 2021
• feehi/cms Packagist Feehi CMS arbitrary file upload vulnerability CVE-2020-22643 7.2 HighJanuary 21, 2021