Search results

Feehi CMS 2.1.1 - Stored Cross-Site Scripting (Stored XSS) in Permission

Status: Open.

#85 In liufee/cms;

· thinhneee opened on Feb 10, 2026

Feehi CMS 2.1.1 - Stored Cross-Site Scripting (Stored XSS) in Category

Status: Open.

#84 In liufee/cms;

· thinhneee opened on Feb 9, 2026

Feehi CMS 2.1.1 - Stored Cross-Site Scripting (Stored XSS) in Role

Status: Open.

#83 In liufee/cms;

· thinhneee opened on Feb 7, 2026

Feehi CMS 2.1.1 - Stored Cross-Site Scripting (Stored XSS) in Page Sign

Status: Open.

#82 In liufee/cms;

· thinhneee opened on Feb 7, 2026

Feehi CMS 2.1.1 - Stored Cross-Site Scripting (Stored XSS) in Article Title.

Status: Open.

#81 In liufee/cms;

· thinhneee opened on Feb 6, 2026

Feehi CMS 2.1.1 - Stored Cross-Site Scripting (Stored XSS) in Article Content.

Status: Open.

#80 In liufee/cms;

· thinhneee opened on Feb 6, 2026

Email Enumeration Vulnerability via Password Reset Functionality

Status: Open.

#79 In liufee/cms;

· mhyar-744 opened on Dec 17, 2025

FeehiCMS version 2.1.1 - Remote Code Execution via Unrestricted File Upload in Ad Management

Status: Open.

#78 In liufee/cms;

· kiwi865 opened on Oct 2, 2025

FeehiCMS version 2.1.1 - Parameter Tampering for Read-Only Username Parameter

Status: Open.

#77 In liufee/cms;

· kiwi865 opened on Oct 2, 2025

FeehiCMS version 2.1.1 - Reverse Tabnabbing due to Improper Security Attributes Configured for External Links

Status: Open.

#76 In liufee/cms;

· kiwi865 opened on Oct 2, 2025

FeehiCMS version 2.1.1 - Improper output encoding in username parameter of Admin Log function lead to Cross Site Scripting (XSS).

Status: Open.

#75 In liufee/cms;

· kiwi865 opened on Oct 2, 2025

FeehiCMS version 2.1.1 - Cross Site Scripting (XSS) in id parameter of User Update function

Status: Open.

#74 In liufee/cms;

· kiwi865 opened on Oct 2, 2025