CVE-2022-34140

Published: Jul 28, 2022
Updated: May 9, 2024
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2022-34140" target="_blank" rel="noopener"> CVE-2022-34140
GHSA: <a href="https://github.com/advisories/GHSA-25q6-m425-9fqr" target="_blank" rel="noopener"> GHSA-25q6-m425-9fqr
Severity: Medium
Exploit:

A stored cross-site scripting (XSS) vulnerability in /index.php?r=site%2Fsignup of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username field.