CVE-2026-31352 - An authenticated stored cross-site scripting (XSS) vulnerability in the Role Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Role Name parameter

Back Back to CVE browser

MEDIUM

An authenticated stored cross-site scripting (XSS) vulnerability in the Role Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Role Name parameter

Published Apr 6, 2026

5.4

MEDIUM

CVSS 3.1

EPSS 0.23%

Description

An authenticated stored cross-site scripting (XSS) vulnerability in the Role Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Role Name parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-19342
Advisory
https://github.com/advisories/GHSA-hqjc-wfvx-x2fv
Advisory
https://github.com/liufee/cms
Product
https://github.com/liufee/cms/issues/83
exploitIssue TrackingMitigation
https://nvd.nist.gov/vuln/detail/CVE-2026-31352

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-19342		Advisory
https://github.com/advisories/GHSA-hqjc-wfvx-x2fv		Advisory
https://github.com/liufee/cms		Product
https://github.com/liufee/cms/issues/83		exploitIssue TrackingMitigation
https://nvd.nist.gov/vuln/detail/CVE-2026-31352