CVE-2022-43320
published 2022-11-09CVE-2022-43320: FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer.
PriorityP422medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EPSS
0.41%
32.4th percentile
FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| feehi | cms | 0 – 2.1.1 | — |
| feehi | feehicms | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
FeehiCMS is vulnerable to Cross-Site Scripting (XSS)
ghsa·2022-11-09
CVE-2022-43320 [MEDIUM] CWE-79 FeehiCMS is vulnerable to Cross-Site Scripting (XSS)
FeehiCMS is vulnerable to Cross-Site Scripting (XSS)
FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer.
OSV
FeehiCMS is vulnerable to Cross-Site Scripting (XSS)
osv·2022-11-09
CVE-2022-43320 [MEDIUM] FeehiCMS is vulnerable to Cross-Site Scripting (XSS)
FeehiCMS is vulnerable to Cross-Site Scripting (XSS)
FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-11-09
Published