CVE-2022-40373
CVE-2022-40373
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 allows remote attackers to run arbitrary code via upload of crafted XML file.
CVSS 5.4 · Medium · EPSS 0.5%
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
feehi/feehicms Packagist
- Versions
- 0.0.1
- 0.0.2
- 0.0.3
- 0.0.4
- 0.0.5
- 0.0.6
- 0.0.7
- 0.0.8
- 0.0.9
- 0.1.0
- 0.1.1
- 0.1.2
- 0.1.3
- 1.0.0-alpha3
- 1.0.0alpha1
- 1.0.0alpha2
- 1.0.0beta1
- 1.0.0beta2
- 1.0.0beta3
- 1.0.0rc1
- 1.0.0rc2
- 2.0.0
- 2.0.1
- 2.0.1.1
- Affected ranges
- ECOSYSTEM: ≤ 2.1.1
No fix published