CVE-2020-21146

2021-01-2618:15:42

Google

osv.dev

feehi cms

cross-site scripting

vulnerability

javascript

browsing

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

37.3%

JSON

Feehi CMS 2.0.8 is affected by a cross-site scripting (XSS) vulnerability. When the user name is inserted as JavaScript code, browsing the post will trigger the XSS.

References

github.com/liufee/cms/issues/43