CVE-2022-40002
CVE-2022-40002
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbirtary code via the callback parameter to /cms/notify.
CVSS 5.4 · Medium · EPSS 0.5%
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
feehi/feehicms Packagist
- Versions
- 0.0.1
- 0.0.2
- 0.0.3
- 0.0.4
- 0.0.5
- 0.0.6
- 0.0.7
- 0.0.8
- 0.0.9
- 0.1.0
- 0.1.1
- 0.1.2
- 0.1.3
- 1.0.0-alpha3
- 1.0.0alpha1
- 1.0.0alpha2
- 1.0.0beta1
- 1.0.0beta2
- 1.0.0beta3
- 1.0.0rc1
- 1.0.0rc2
- 2.0.0
- 2.0.1
- 2.0.1.1
- Affected ranges
- ECOSYSTEM: ≤ 2.1.1
No fix published