~ / search / GHSA-v762-47vh-j7q3

GHSA-v762-47vh-j7q3

Feehi CMS vulnerable to Cross-site Scripting in Username Field

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-21146

Packages

EcosystemPackageAffectedFixed in
Packagist feehi/cms < 2.0.8.1 2.0.8.1

Details

As written in the advisory (Markdown source, shown as plain text).

Feehi CMS 2.0.8 is affected by a cross-site scripting (XSS) vulnerability. When the user name is inserted as JavaScript code, browsing the post will trigger the XSS.

References

External links from the advisory. They lead to third-party sites.