CVE-2021-30108: Feehi CMS

Critical severity, CVSS 9.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Feehi CMS 2.1.1 is affected by a Server-side request forgery (SSRF) vulnerability. When the user modifies the HTTP Referer header to any url, the server can make a request to it.

Affected products

• Feehi Feehi CMS: version 2.1.1 only

Published 2021-05-24. Last modified 2026-06-17.