Feehicms

feehicms

Vendor: Feehi • 24 CVEs

CVEs (24)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-40408 1Feehi 1Feehicms Jun 17, 2026 Sep 29, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 FeehiCMS v2.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted payload injected into the Comment box under the Single Page module.
CVE-2020-21516 1Feehi 1Feehicms Jun 17, 2026 Sep 6, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8 at the head image upload, that allows attackers to execute relevant PHP code.
CVE-2020-21322 1Feehi 1Feehicms Jun 17, 2026 Sep 15, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An arbitrary file upload vulnerability in Feehi CMS v2.0.8 and below allows attackers to execute arbitrary code via a crafted PHP file.
CVE-2020-19709 1Feehi 1Feehicms Jun 17, 2026 Aug 26, 2021 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Insufficient filtering of the tag parameters in feehicms 0.1.3 allows attackers to execute arbitrary web or HTML via a crafted payload.