~ / search / GHSA-m54v-gv8p-9pqp

GHSA-m54v-gv8p-9pqp

FeehiCMS Cross Site Scripting vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-36572

Packages

EcosystemPackageAffectedFixed in
Packagist feehi/feehicms <= 2.1.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Cross Site Scripting (XSS) vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via the user name field of the login page.

References

External links from the advisory. They lead to third-party sites.