Vulnerabilities > Feehi > Feehi CMS > 2.1.1

DATE CVE VULNERABILITY TITLE RISK
2022-07-28 CVE-2022-34140 Cross-site Scripting vulnerability in Feehi CMS 2.1.1
A stored cross-site scripting (XSS) vulnerability in /index.php?r=site%2Fsignup of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username field.
network
low complexity
feehi CWE-79
5.4
2021-05-24 CVE-2021-30108 Server-Side Request Forgery (SSRF) vulnerability in Feehi CMS 2.1.1
Feehi CMS 2.1.1 is affected by a Server-side request forgery (SSRF) vulnerability.
network
low complexity
feehi CWE-918
6.4