GHSA-c2vx-rx6x-m9wj: FeehiCMS is vulnerable to cross-site scripting via the id parameter of the User Update function

December 1, 2025 • Source: GitHub Global Advisories

FeehiCMS 2.1.1 is vulnerable to Cross-Site Scripting (XSS) via the id parameter in the User Update function.

Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function (?r=user%2Fupdate).