GHSA-qgc9-p7cj-jvh6
Medium · 6.5CVSS
6.5
EPSS
—
Published
Dec 1, 2025
CISA due date
—
The record
FeehiCMS fails to enforce server-side immutability
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Packagist | feehi/feehicms | 2.1.1 | No fix |
| packagist | feehi/feehicms | 2.1.1 | No fix |
Related vulnerabilities
- CVE-2025-63523 FeehiCMS version 2.1.1 fails to enforce server-side immutability for parameters that are… Same vulnerability
- GHSA-c2vx-rx6x-m9wj FeehiCMS is vulnerable to cross-site scripting via the id parameter of the User Update… Also affects feehi/feehicms
- GHSA-w756-rf26-7rmr FeehiCMS is vulnerable to reverse tabnabbing Also affects feehi/feehicms
- CVE-2025-63520 Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 via the id parameter of the… Also affects feehi/feehicms
- CVE-2025-63522 Reverse Tabnabbing vulnerability in FeehiCMS 2.1.1 in the Comments Management function Also affects feehi/feehicms
- CVE-2026-62958 libriscv is a RISC-V sandbox and emulator. CWE-125
- CVE-2026-119338 Tesseract is an open source OCR engine. CWE-125
- CVE-2026-119299 gopacket provides packet processing capabilities for Go. CWE-125