medium6.1
CVE-2020-36607
FeehiCMS Cross Site Scripting vulnerability
Impact
Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | feehi/feehicms | <= 2.0.8 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Feehi | Feehicms | Version 2.0.8 |