~ / search / GHSA-c2vx-rx6x-m9wj

GHSA-c2vx-rx6x-m9wj

FeehiCMS is vulnerable to cross-site scripting via the id parameter of the User Update function

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-63520

Packages

EcosystemPackageAffectedFixed in
Packagist feehi/feehicms 2.1.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function (?r=user%2Fupdate).

References

External links from the advisory. They lead to third-party sites.