Packagist/feehi/cms CVE-2026-31354: medium 5.4, EPSS 0.23%

Feehi CMS has authenticated stored cross-site scripting (XSS) vulnerabilities via the Permissions module

Action: No fix published. Pin and monitor.

Affected

No affected ranges in the source.

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-xqm9-6qmm-xrqh
• https://nvd.nist.gov/vuln/detail/CVE-2026-31354
• https://github.com/liufee/cms/issues/85
• https://github.com/liufee/cms

CVE-2026-31354 · published 2026-04-06T18:33:07Z · modified 2026-04-08T00:27:17.158275Z · JSON