An authenticated stored cross-site scripting (XSS) vulnerability in the Category module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter.
History

Tue, 07 Apr 2026 09:45:00 +0000

Type Values Removed Values Added
First Time appeared Feehi
Feehi feehi Cms
Vendors & Products Feehi
Feehi feehi Cms

Tue, 07 Apr 2026 00:00:00 +0000

Type Values Removed Values Added
Title Authenticated Stored XSS in Feehi CMS Category Module
Weaknesses CWE-79

Mon, 06 Apr 2026 16:45:00 +0000

Type Values Removed Values Added
Description An authenticated stored cross-site scripting (XSS) vulnerability in the Category module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2026-04-06T00:00:00.000Z

Updated: 2026-04-06T15:58:06.933Z

Reserved: 2026-03-09T00:00:00.000Z

Link: CVE-2026-31353

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-04-06T16:16:33.130

Modified: 2026-04-06T16:16:33.130

Link: CVE-2026-31353

cve-icon Redhat

No data.