~ / search / GHSA-pwh3-3pcm-6vjh

GHSA-pwh3-3pcm-6vjh

FeehiCMS vulnerable to Cross Site Scripting

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-20589

Packages

EcosystemPackageAffectedFixed in
Packagist feehi/feehicms <= 2.0.8 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.

References

External links from the advisory. They lead to third-party sites.