~ / search / GHSA-xv8h-43h9-v3jq

GHSA-xv8h-43h9-v3jq

FeehiCMS Cross Site Scripting vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-40373

Packages

EcosystemPackageAffectedFixed in
Packagist feehi/feehicms <= 2.1.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 allows remote attackers to run arbitrary code via upload of crafted XML file.

References

External links from the advisory. They lead to third-party sites.