CVE-2022-34140

A stored cross-site scripting (XSS) vulnerability in /index.php?r=site%2Fsignup of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username field.
References
Configurations

Configuration 1 (hide)

cpe:2.3:a:feehi:feehi_cms:2.1.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2022-07-28 00:15

Updated : 2024-02-28 19:29


NVD link : CVE-2022-34140

Mitre link : CVE-2022-34140

CVE.ORG link : CVE-2022-34140


JSON object : View

Products Affected

feehi

  • feehi_cms
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')