CVE-2022-43320 - FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer

Back Back to CVE browser

MEDIUM

FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer

Published Nov 9, 2022

6.1

MEDIUM

CVSS 3.1

EPSS 0.43%

Description

FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-7212
Advisory
https://github.com/advisories/GHSA-3ppm-fwhm-qqg6
Advisory
https://github.com/liufee/feehicms/issues/4
ExploitIssue TrackingThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-43320

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-7212		Advisory
https://github.com/advisories/GHSA-3ppm-fwhm-qqg6		Advisory
https://github.com/liufee/feehicms/issues/4		ExploitIssue TrackingThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-43320