medium6.1
CVE-2020-20589
FeehiCMS vulnerable to Cross Site Scripting
Impact
Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | feehi/feehicms | <= 2.0.8 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Feehi | Feehicms | Version 2.0.8 |