Feehi Cms vulnerabilities

• feehi cms Feehi CMS REST API Endpoint articles missing authentication CVE-2026-13546 6.9 MediumJune 29, 2026
• feehi cms Feehi CMS API users access control CVE-2026-13544 5.3 MediumJune 29, 2026
• feehi cms Feehi CMS has authenticated stored cross-site scripting (XSS) vulnerabilities via the Permissions module CVE-2026-31354 5.4 MediumApril 6, 2026
• feehi cms Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the Category module CVE-2026-31353 5.4 MediumApril 6, 2026
• feehi cms Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the Role Management module CVE-2026-31352 5.4 MediumApril 6, 2026
• feehi cms Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the creation/editing module CVE-2026-31351 4.8 MediumApril 6, 2026
• feehi cms Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the Page Sign parameter CVE-2026-31350 5.4 MediumApril 6, 2026
• feehi cms Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the creation/editing module CVE-2026-31313 5.4 MediumApril 6, 2026
• feehi feehicms FeehiCMS TimThumb timthumb.php server-side request forgery CVE-2025-15264 6.9 MediumDecember 30, 2025
• feehi feehicms FeehiCMS Has a Remote Code Execution via Unrestricted File Upload in Ad Management CVE-2025-65657 6.5 MediumDecember 2, 2025
• feehi feehicms FeehiCMS fails to enforce server-side immutability CVE-2025-63523 6.5 MediumDecember 1, 2025
• feehi feehicms FeehiCMS is vulnerable to reverse tabnabbing CVE-2025-63522 4.6 MediumDecember 1, 2025
• feehi feehicms FeehiCMS is vulnerable to cross-site scripting via the id parameter of the User Update function CVE-2025-63520 6.1 MediumDecember 1, 2025
• feehi feehicms FeehiCMS index.php insert unrestricted upload CVE-2024-8296 5.3 MediumAugust 29, 2024
• feehi feehicms FeehiCMS index.php createBanner unrestricted upload CVE-2024-8295 5.3 MediumAugust 29, 2024
• feehi feehicms FeehiCMS index.php update unrestricted upload CVE-2024-8294 5.3 MediumAugust 29, 2024
• feehi feehicms Liufee CMS File Upload vulnerability CVE-2020-21489 Fix available 9.8 CriticalJune 20, 2023
• feehi feehicms liufee CMS File Upload vulnerability CVE-2020-21174 Fix available 9.8 CriticalJune 20, 2023
• feehi feehicms FeehiCMS Cross Site Scripting vulnerability CVE-2022-40373 5.4 MediumDecember 15, 2022
• feehi feehicms FeehiCMS Cross Site Scripting vulnerability CVE-2022-40002 5.4 MediumDecember 15, 2022
• feehi feehicms FeehiCMS Cross Site Scripting vulnerability CVE-2022-40001 5.4 MediumDecember 15, 2022
• feehi feehicms FeehiCMS Cross Site Scripting vulnerability CVE-2022-40000 5.4 MediumDecember 15, 2022
• feehi feehicms FeehiCMS Unrestricted Upload vulnerability CVE-2021-36573 5.4 MediumDecember 15, 2022
• feehi feehicms FeehiCMS Cross Site Scripting vulnerability CVE-2021-36572 6.1 MediumDecember 15, 2022
• feehi feehicms FeehiCMS Cross Site Scripting vulnerability CVE-2020-36607 6.1 MediumDecember 15, 2022
• feehi feehicms FeehiCMS vulnerable to Cross Site Scripting CVE-2020-20589 6.1 MediumDecember 15, 2022
• feehi feehicms FeehiCMS Post My Comment Tab cross-site request forgery CVE-2022-4014 4.3 MediumNovember 16, 2022
• feehi feehicms FeehiCMS is vulnerable to Cross-Site Scripting (XSS) CVE-2022-43320 6.1 MediumNovember 9, 2022
• feehi feehicms FeehiCMS vulnerable to Cross-Site scripting via crafted payload CVE-2022-40408 5.4 MediumSeptember 29, 2022
• feehi cms Feehi CMS host header injection vulnerability CVE-2022-38796 6.1 MediumSeptember 14, 2022
• feehi feehicms FeehiCMS has an arbitrary file upload vulnerability CVE-2020-21516 Fix available 9.8 CriticalSeptember 6, 2022
• feehi cms Feehi CMS Cross-site Scripting CVE-2022-34140 Public exploit 5.4 MediumJuly 27, 2022
• feehi cms Feehi CMS arbitrary code execution via crafted PHP file CVE-2022-34971 8.8 HighJuly 27, 2022
• feehi feehicms Arbitrary Code Execution in feehi/cms CVE-2020-21322 Fix available 9.8 CriticalSeptember 15, 2021
• feehi feehicms Cross-site scripting in feehicms CVE-2020-19709 6.1 MediumAugust 26, 2021
• feehi cms Server-Side Request Forgery in Feehi CMS CVE-2021-30108 9.1 CriticalMay 24, 2021
• feehi cms Feehi CMS vulnerable to Cross-site Scripting in Username Field CVE-2020-21146 Fix available 6.1 MediumJanuary 21, 2021
• feehi cms Feehi CMS arbitrary file upload vulnerability CVE-2020-22643 7.2 HighJanuary 21, 2021