Skip to content
Noroxi

Feehi records

36 published records for vendor feehi.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
8
With a fix record
13.9%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 22
  3. 23
  4. 24
  5. 25
  6. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

36 records
  • CVE-2020-21322
    40Plan

    An arbitrary file upload vulnerability in Feehi CMS v2.0.8 and below allows attackers to execute arbitrary code via a crafted PHP file.

    CriticalCVSS 9.8No exploitEPSS 1%

    feehi · feehicmsSep 15, 2021

  • CVE-2020-21489
    39Monitor

    File Upload vulnerability in Feehicms v.2.0.8 allows a remote attacker to execute arbitrary code via the /admin/index.php?r=admin-user%2Fupd

    CriticalCVSS 9.8No exploitEPSS 1%

    feehi · feehicmsJun 20, 2023

  • CVE-2020-21174
    39Monitor

    File Upload vulenrability in liufee CMS v.2.0.7.1 allows a remote attacker to execute arbitrary code via the image suffix function.

    CriticalCVSS 9.8No exploitEPSS 1%

    feehi · feehicmsJun 20, 2023

  • CVE-2020-21516
    39Monitor

    There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8 at the head image upload, that allows attackers to execute relevant PHP co

    CriticalCVSS 9.8No exploitEPSS 1%

    feehi · feehicmsSep 6, 2022

  • CVE-2021-30108
    36Monitor

    Feehi CMS 2.1.1 is affected by a Server-side request forgery (SSRF) vulnerability.

    CriticalCVSS 9.1No exploitEPSS 1%

    feehi · feehi cmsMay 24, 2021

  • CVE-2022-34971
    35Monitor

    An arbitrary file upload vulnerability in the Advertising Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary code v

    HighCVSS 8.8No exploitEPSS 1%

    feehi · feehi cmsJul 26, 2022

  • CVE-2020-22643
    29Monitor

    Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution.

    HighCVSS 7.2No exploitEPSS 1%

    feehi · feehi cmsJan 26, 2021

  • CVE-2025-65657
    26Monitor

    FeehiCMS version 2.1.1 has a Remote Code Execution via Unrestricted File Upload in Ad Management.

    MediumCVSS 6.5No exploitEPSS 0%

    feehi · feehicmsDec 2, 2025

  • CVE-2025-63523
    26Monitor

    FeehiCMS version 2.1.1 fails to enforce server-side immutability for parameters that are presented to clients as "read-only." An authenticat

    MediumCVSS 6.5No exploitEPSS 0%

    feehi · feehicmsDec 1, 2025

  • CVE-2020-21146
    24Monitor

    Feehi CMS 2.0.8 is affected by a cross-site scripting (XSS) vulnerability.

    MediumCVSS 6.1No exploitEPSS 0%

    feehi · feehi cmsJan 26, 2021

  • CVE-2020-36607
    24Monitor

    Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html t

    MediumCVSS 6.1No exploitEPSS 0%

    feehi · feehicmsDec 15, 2022

  • CVE-2020-19709
    24Monitor

    Insufficient filtering of the tag parameters in feehicms 0.1.3 allows attackers to execute arbitrary web or HTML via a crafted payload.

    MediumCVSS 6.1No exploitEPSS 0%

    feehi · feehicmsAug 25, 2021

  • CVE-2020-20589
    24Monitor

    Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html t

    MediumCVSS 6.1No exploitEPSS 0%

    feehi · feehicmsDec 15, 2022

  • CVE-2022-38796
    24Monitor

    A Host Header Injection vulnerability in Feehi CMS 2.1.1 may allow an attacker to spoof a particular header.

    MediumCVSS 6.1No exploitEPSS 0%

    feehi · feehi cmsSep 14, 2022

  • CVE-2021-36572
    24Monitor

    Cross Site Scripting (XSS) vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via the user name field of the login

    MediumCVSS 6.1No exploitEPSS 0%

    feehi · feehicmsDec 15, 2022

  • CVE-2022-43320
    24Monitor

    FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /web/admin/index.php?

    MediumCVSS 6.1No exploitEPSS 0%

    feehi · feehicmsNov 9, 2022

  • CVE-2025-63520
    24Monitor

    Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function (?r=user%2Fupdate).

    MediumCVSS 6.1No exploitEPSS 0%

    feehi · feehicmsDec 1, 2025

  • CVE-2022-34140
    22Monitor

    A stored cross-site scripting (XSS) vulnerability in /index.php?r=site%2Fsignup of Feehi CMS v2.1.1 allows attackers to execute arbitrary we

    MediumCVSS 5.4Proof of conceptEPSS 4%

    feehi · feehi cmsJul 27, 2022

  • CVE-2025-15264
    22Monitor

    FeehiCMS TimThumb timthumb.php server-side request forgery

    MediumCVSS 5.5No exploitEPSS 0%

    feehi · feehicmsDec 30, 2025

  • CVE-2024-8294
    21Monitor

    FeehiCMS index.php update unrestricted upload

    MediumCVSS 5.3No exploitEPSS 0%

    feehi · feehicmsAug 29, 2024

  • CVE-2024-8295
    21Monitor

    FeehiCMS index.php createBanner unrestricted upload

    MediumCVSS 5.3No exploitEPSS 0%

    feehi · feehicmsAug 29, 2024

  • CVE-2024-8296
    21Monitor

    FeehiCMS index.php insert unrestricted upload

    MediumCVSS 5.3No exploitEPSS 0%

    feehi · feehicmsAug 29, 2024

  • CVE-2022-40002
    21Monitor

    Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbirtary code via the callback parameter to /cms/

    MediumCVSS 5.4No exploitEPSS 0%

    feehi · feehicmsDec 15, 2022

  • CVE-2022-40373
    21Monitor

    Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 allows remote attackers to run arbitrary code via upload of crafted XML file.

    MediumCVSS 5.4No exploitEPSS 0%

    feehi · feehicmsDec 15, 2022

  • CVE-2022-40001
    21Monitor

    Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the title field of the create a

    MediumCVSS 5.4No exploitEPSS 0%

    feehi · feehicmsDec 15, 2022