Medium severity5.4NVD Advisory· Published Apr 6, 2026· Updated Apr 9, 2026
CVE-2026-31350
CVE-2026-31350
Description
An authenticated stored cross-site scripting (XSS) vulnerability in Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Page Sign parameter.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- github.com/liufee/cms/issues/82nvdExploitIssue TrackingMitigationWEB
- github.com/advisories/GHSA-cgxr-v74v-g9mmghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-31350ghsaADVISORY
News mentions
0No linked articles in our index yet.