Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2021-36572

Cross Site Scripting (XSS) vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via the user name field of the login page.

VectorNETWORK

PublishedDec 15, 2022, 19:15

Published Bycve@mitre.org

Base Score

Score6.1

Package (Ecosystem)IntroducedFixedLimit

feehi/feehicms(Packagist)0N/AN/A

CWE-79

Base Score

6.1

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK