~ / search / GHSA-cjp8-vv38-p3g2

GHSA-cjp8-vv38-p3g2

Cross-Site Request Forgery in feehi/feehicms

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-4014

Packages

EcosystemPackageAffectedFixed in
Packagist feehi/feehicms <= 2.0.1.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

FeehiCMS vulnerable to Cross-Site Request Forgery. Affected by this issue is some unknown functionality of the component Post My Comment Tab. The manipulation leads to cross-site request forgery. The attack may be launched remotely.

References

External links from the advisory. They lead to third-party sites.