Feehi CMS 2.0.8 is affected by a cross-site scripting (XSS) vulnerability. When the user name is inserted as JavaScript code, browsing the post will trigger the XSS.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| feehi/cms(Packagist) | 0 | 2.0.8.1 | N/A |
CVSS Metrics