Composer feehi/cms has 21 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2022-34140 | Feehi CMS Cross-site Scripting | medium | 5.4 | <=2.1.1 | – |
| CVE-2020-22643 | Feehi CMS arbitrary file upload vulnerability | high | 7.2 | <=2.1.0-beta | – |
| CVE-2020-21322 | Arbitrary Code Execution in feehi/cms | high | 0.0 | <2.0.8.1 | 2.0.8.1 |
| CVE-2020-21174 | liufee CMS File Upload vulnerability | critical | 9.8 | <2.0.8.1 | 2.0.8.1 |
| CVE-2020-21489 | Liufee CMS File Upload vulnerability | critical | 9.8 | <2.0.8.1 | 2.0.8.1 |
| CVE-2022-34971 | Feehi CMS arbitrary code execution via crafted PHP file | high | 8.8 | <=2.1.1 | – |
| CVE-2020-21516 | FeehiCMS has an arbitrary file upload vulnerability | critical | 9.8 | <2.0.8.1 | 2.0.8.1 |
| CVE-2021-30108 | Server-Side Request Forgery in Feehi CMS | critical | 9.1 | <=2.1.1 | – |
| CVE-2020-21146 | Feehi CMS vulnerable to Cross-site Scripting in Username Field | medium | 6.1 | <2.0.8.1 | 2.0.8.1 |
| CVE-2024-8294 | FeehiCMS file upload vulnerability | medium | 6.3 | <=2.1.1 | – |
| CVE-2024-8295 | FeehiCMS BannerForm[img] unrestricted upload | medium | 6.3 | <=2.1.1 | – |
| CVE-2024-8296 | FeehiCMS User[avatar] unrestricted upload | medium | 6.3 | <=2.1.1 | – |
| CVE-2022-38796 | Feehi CMS host header injection vulnerability | medium | 6.1 | <=2.1.1 | – |
| CVE-2022-43320 | FeehiCMS is vulnerable to Cross-Site Scripting (XSS) | medium | 6.1 | <=2.1.1 | – |
| CVE-2025-65657 | FeehiCMS Has a Remote Code Execution via Unrestricted File Upload in Ad Management | medium | 6.5 | <=2.1.1 | – |
| CVE-2026-31352 | Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the Role Management module | medium | 5.4 | =2.1.1 | – |
| CVE-2026-31354 | Feehi CMS has authenticated stored cross-site scripting (XSS) vulnerabilities via the Permissions module | medium | 5.4 | =2.1.1 | – |
| CVE-2026-31351 | Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the creation/editing module | medium | 4.8 | =2.1.1 | – |
| CVE-2026-31350 | Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the Page Sign parameter | medium | 5.4 | =2.1.1 | – |
| CVE-2026-31353 | Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the Category module | medium | 5.4 | =2.1.1 | – |
| CVE-2026-31313 | Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the creation/editing module | medium | 5.4 | =2.1.1 | – |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked