Feehi FeehiCMS 2.1.1
Approved changes feed: RSS · Atom
cpe:2.3:a:feehi:feehicms:2.1.1:*:*:*:*:*:*:*
part: a version: 2.1.1 update: *
| Vendor | Feehi (d2f8f505-989f-5815-91cc-7908ebab1568) |
|---|---|
| Product | Feehicms (19e6cdf5-cb5c-5635-944e-6b4426fd3a24) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/liufee/cms |
purl2cpe | 2026-06-01 10:12:35.596627 |
pkg:github/liufee/cms |
purl2cpe | 2026-06-01 10:12:35.596629 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-65657 |
vulnerable | 2026-06-08 07:39:20.940882 |
Details available
FeehiCMS version 2.1.1 has a Remote Code Execution via Unrestricted File Upload in Ad Management. FeehiCMS version 2.1.1 allows authenticated remote attackers to upload files that the server later executes (or stores in an executable location) without sufficient validation, sanitization, or execution restrictions. An authenticated remote attacker can upload a crafted PHP file and cause the application or web server to execute it, resulting in remote code execution (RCE).
Published: 2025-12-02T00:00:00.000Z
Updated: 2025-12-02T21:57:54.194Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-63523 |
vulnerable | 2026-06-08 07:39:17.641616 |
Details available
FeehiCMS version 2.1.1 fails to enforce server-side immutability for parameters that are presented to clients as "read-only." An authenticated attacker can intercept and modify the parameter in transit and the backend accepts the changes. This can lead to unintended username changes.
Published: 2025-12-01T00:00:00.000Z
Updated: 2025-12-01T20:13:19.913Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-63522 |
vulnerable | 2026-06-08 07:39:17.641211 |
Details available
Reverse Tabnabbing vulnerability in FeehiCMS 2.1.1 in the Comments Management function
Published: 2025-12-01T00:00:00.000Z
Updated: 2025-12-01T19:55:33.144Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-63520 |
vulnerable | 2026-06-08 07:39:17.640775 |
Details available
Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function (?r=user%2Fupdate).
Published: 2025-12-01T00:00:00.000Z
Updated: 2025-12-01T19:33:06.416Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43320 |
vulnerable | 2026-06-08 05:49:31.492616 |
Details available
FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer.
Published: 2022-11-09T00:00:00.000Z
Updated: 2025-05-01T15:17:45.951Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40408 |
vulnerable | 2026-06-08 05:48:24.943367 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40373 |
vulnerable | 2026-06-08 05:48:24.935750 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40002 |
vulnerable | 2026-06-08 05:48:22.803382 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40001 |
vulnerable | 2026-06-08 05:48:22.802757 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40000 |
vulnerable | 2026-06-08 05:48:22.802210 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.