tocsin

CVE-2025-63520

1 advisory.

Packagist/feehi/feehicms CVE-2025-63520: medium 6.1, EPSS 0.24%

FeehiCMS is vulnerable to cross-site scripting via the id parameter of the User Update function

Action: No fix published. Pin and monitor.

Affected

No affected ranges in the source.

Fixed versions

No fixed version in the source.

Sources

CVE-2025-63520 · published · modified · JSON