← All advisories

Moderate severityOSV Advisory· Published Dec 1, 2025· Updated Dec 1, 2025

CVE-2025-63520

CVE-2025-63520

Description

Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function (?r=user%2Fupdate).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Liufee/CMSOSV
Range: 0.0.1, 0.0.2, 0.0.3, …
ghsa-coords
pkg:composer/feehi/feehicms

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-c2vx-rx6x-m9wjghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2025-63520ghsaADVISORY
github.com/kiwi865/CVEs/blob/main/CVE-2025-63520.mdghsaWEB
github.com/liufee/cms/issues/74ghsaWEB

News mentions

0

No linked articles in our index yet.