Multiple authenticated stored cross-site scripting (XSS) vulnerabilities in the Permissions module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Group, Category or Description parameters.
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a, 2.1.1 |
Updated vendor and product information, set severity to HIGH, and marked the vulnerability as actively exploited.
Initial creation
