Vulnerabilities > Feehi

DATE CVE VULNERABILITY TITLE RISK
2021-09-15 CVE-2020-21322 Unrestricted Upload of File with Dangerous Type vulnerability in Feehi Feehicms
An arbitrary file upload vulnerability in Feehi CMS v2.0.8 and below allows attackers to execute arbitrary code via a crafted PHP file.
network
low complexity
feehi CWE-434
critical
9.8
2021-08-26 CVE-2020-19709 Cross-site Scripting vulnerability in Feehi Feehicms 0.1.3
Insufficient filtering of the tag parameters in feehicms 0.1.3 allows attackers to execute arbitrary web or HTML via a crafted payload.
network
low complexity
feehi CWE-79
6.1
2021-05-24 CVE-2021-30108 Server-Side Request Forgery (SSRF) vulnerability in Feehi CMS 2.1.1
Feehi CMS 2.1.1 is affected by a Server-side request forgery (SSRF) vulnerability.
network
low complexity
feehi CWE-918
critical
9.1
2021-01-26 CVE-2020-22643 Unrestricted Upload of File with Dangerous Type vulnerability in Feehi CMS 2.1.0
Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution.
network
low complexity
feehi CWE-434
7.2
2021-01-26 CVE-2020-21146 Cross-site Scripting vulnerability in Feehi CMS 2.0.8
Feehi CMS 2.0.8 is affected by a cross-site scripting (XSS) vulnerability.
network
low complexity
feehi CWE-79
6.1