~ / search / GHSA-6jj8-mqx2-7fg5

GHSA-6jj8-mqx2-7fg5

FeehiCMS Cross Site Scripting vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-36607

Packages

EcosystemPackageAffectedFixed in
Packagist feehi/feehicms <= 2.0.8 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.

References

External links from the advisory. They lead to third-party sites.