Vulnerabilities (CVE)

Filtered by vendor Feehi Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-21322 1 Feehi 1 Feehicms 2021-09-28 7.5 HIGH 9.8 CRITICAL
An arbitrary file upload vulnerability in Feehi CMS v2.0.8 and below allows attackers to execute arbitrary code via a crafted PHP file.
CVE-2021-30108 1 Feehi 1 Feehi Cms 2021-05-28 6.4 MEDIUM 9.1 CRITICAL
Feehi CMS 2.1.1 is affected by a Server-side request forgery (SSRF) vulnerability. When the user modifies the HTTP Referer header to any url, the server can make a request to it.