~ / search / GHSA-f8pv-x7h8-687v

GHSA-f8pv-x7h8-687v

Cross-site scripting in feehicms

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-19709

Packages

EcosystemPackageAffectedFixed in
Packagist feehi/feehicms <= 0.1.3 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Insufficient filtering of the tag parameters in feehicms 0.1.3 allows attackers to execute arbitrary web or HTML via a crafted payload.

References

External links from the advisory. They lead to third-party sites.