Vulnerabilities > Feehi > Feehicms > 2.1.1
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-08-29 | CVE-2024-8296 | Unrestricted Upload of File with Dangerous Type vulnerability in Feehi Feehicms A vulnerability was found in FeehiCMS up to 2.1.1 and classified as critical. | 9.8 |
| 2024-08-29 | CVE-2024-8295 | Unrestricted Upload of File with Dangerous Type vulnerability in Feehi Feehicms A vulnerability has been found in FeehiCMS up to 2.1.1 and classified as critical. | 9.8 |
| 2024-08-29 | CVE-2024-8294 | Unrestricted Upload of File with Dangerous Type vulnerability in Feehi Feehicms A vulnerability, which was classified as critical, was found in FeehiCMS up to 2.1.1. | 9.8 |
| 2022-12-15 | CVE-2021-36572 | Cross-site Scripting vulnerability in Feehi Feehicms Cross Site Scripting (XSS) vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via the user name field of the login page. | 6.1 |
| 2022-12-15 | CVE-2021-36573 | Cross-site Scripting vulnerability in Feehi Feehicms File Upload vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via crafted image upload. | 5.4 |
| 2022-12-15 | CVE-2022-40000 | Cross-site Scripting vulnerability in Feehi Feehicms 2.1.1 Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the username field of the admin log in page. | 5.4 |
| 2022-12-15 | CVE-2022-40001 | Cross-site Scripting vulnerability in Feehi Feehicms 2.1.1 Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the title field of the create article page. | 5.4 |
| 2022-12-15 | CVE-2022-40002 | Cross-site Scripting vulnerability in Feehi Feehicms 2.1.1 Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbirtary code via the callback parameter to /cms/notify. | 5.4 |
| 2022-12-15 | CVE-2022-40373 | Cross-site Scripting vulnerability in Feehi Feehicms 2.1.1 Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 allows remote attackers to run arbitrary code via upload of crafted XML file. | 5.4 |
| 2022-11-09 | CVE-2022-43320 | Cross-site Scripting vulnerability in Feehi Feehicms 2.1.1 FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer. | 6.1 |