medium6.1
CVE-2021-36572
FeehiCMS Cross Site Scripting vulnerability
Impact
Cross Site Scripting (XSS) vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via the user name field of the login page.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | feehi/feehicms | <= 2.1.1 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Feehi | Feehicms | through 2.1.1 |