Skip to content
Sign in
5.3 Medium

CVE-2024-8294 A vulnerability, which was classified as critical, was found in FeehiCMS up to 2.1.1

Description

A vulnerability, which was classified as critical, was found in FeehiCMS up to 2.1.1. This affects the function update of the file /admin/index.php?r=friendly-link%2Fupdate. The manipulation of the argument FriendlyLink[image] leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products and versions

Product Affected versions Fixed in
FeehiCMS 2.1 2.1.0 → 2.1.1 No fix stated
feehicms 2.1 earliest → 2.1.1 No fix stated

Other CVEs of FeehiCMS

The 4 CVEs of FeehiCMS →
CVE-2025-15264 A vulnerability was determined in FeehiCMS up to 2.1.1 6.9 Medium CVE-2024-8296 A vulnerability was found in FeehiCMS up to 2.1.1 and classified as critical 5.3 Medium CVE-2024-8295 A vulnerability has been found in FeehiCMS up to 2.1.1 and classified as critical 5.3 Medium
Track this CVE