CVE-2021-36572: Feehi Feehicms

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via the user name field of the login page.

Affected products

• Feehi Feehicms: up to and including 2.1.1

Published 2022-12-15. Last modified 2026-06-17.