GHSA-w756-rf26-7rmr
Medium · 4.6CVSS
4.6
EPSS
—
Published
Dec 1, 2025
CISA due date
—
The record
FeehiCMS is vulnerable to reverse tabnabbing
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Packagist | feehi/feehicms | 0 | No fix |
Related vulnerabilities
- CVE-2025-63522 Reverse Tabnabbing vulnerability in FeehiCMS 2.1.1 in the Comments Management function Same vulnerability
- GHSA-c2vx-rx6x-m9wj FeehiCMS is vulnerable to cross-site scripting via the id parameter of the User Update… Also affects feehi/feehicms
- GHSA-qgc9-p7cj-jvh6 FeehiCMS fails to enforce server-side immutability Also affects feehi/feehicms
- CVE-2025-63520 Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 via the id parameter of the… Also affects feehi/feehicms
- CVE-2025-63523 FeehiCMS version 2.1.1 fails to enforce server-side immutability for parameters that are… Also affects feehi/feehicms
- CVE-2026-119715 NocoDB before 2026.08.0 contains a clickjacking vulnerability that allows any origin to… CWE-1021
- CVE-2026-20942 Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based)… CWE-1021
- CVE-2026-67079 HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker… CWE-1021