~ / search / GHSA-3ppm-fwhm-qqg6

GHSA-3ppm-fwhm-qqg6

FeehiCMS is vulnerable to Cross-Site Scripting (XSS)

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-43320

Packages

EcosystemPackageAffectedFixed in
Packagist feehi/cms <= 2.1.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer.

References

External links from the advisory. They lead to third-party sites.