Feehi vulnerabilities
We track 5 vulnerabilities in Feehi products across 3 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on June 29, 2026.
Latest Feehi vulnerabilities
- 7.3 High severity
CMS: Improper Authentication
A vulnerability was found in Feehi CMS up to 2.1.1. This vulnerability affects unknown code of the file /api/articles of the component REST API Endpoint. Performing a manipulation results in missing authentication. The attack may be initiated remotely. The exp
- 9.8 Critical severity
FeehiCMS: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in FeehiCMS up to 2.1.1 and classified as critical. This issue affects the function insert of the file /admin/index.php?r=user%2Fcreate. The manipulation of the argument User[avatar] leads to unrestricted upload. The attack may be ini
- 9.8 Critical severity
FeehiCMS: Unrestricted Upload of File with Dangerous Type
A vulnerability has been found in FeehiCMS up to 2.1.1 and classified as critical. This vulnerability affects the function createBanner of the file /admin/index.php?r=banner%2Fbanner-create. The manipulation of the argument BannerForm[img] leads to unrestricte
- 9.8 Critical severity
FeehiCMS: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, was found in FeehiCMS up to 2.1.1. This affects the function update of the file /admin/index.php?r=friendly-link%2Fupdate. The manipulation of the argument FriendlyLink[image] leads to unrestricted upload. It
- 8.8 High severity
Feehi CMS: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the Advertising Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary code via a crafted PHP file.