← All advisories

Medium severity6.1OSV Advisory· Published Dec 1, 2025· Updated Jun 17, 2026

CVE-2025-63520

CVE-2025-63520

Description

Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function (?r=user%2Fupdate).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Liufee/CMSOSV
Range: 0.0.1, 0.0.2, 0.0.3, …
Feehi/Feehicms
cpe:2.3:a:feehi:feehicms:2.1.1:*:*:*:*:*:*:*
ghsa-coords
pkg:composer/feehi/feehicms

Patches

Vulnerability mechanics

References

4

github.com/kiwi865/CVEs/blob/main/CVE-2025-63520.mdnvdExploitThird Party AdvisoryWEB
github.com/liufee/cms/issues/74nvdExploitIssue TrackingVendor AdvisoryWEB
github.com/advisories/GHSA-c2vx-rx6x-m9wjghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2025-63520ghsaADVISORY

News mentions

0

No linked articles in our index yet.