tocsin

CVE-2026-31352

1 advisory.

Packagist/feehi/cms CVE-2026-31352: medium 5.4

Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the Role Management module

Action: No fix published. Pin and monitor.

Affected

No affected ranges in the source.

Fixed versions

No fixed version in the source.

Sources

CVE-2026-31352 · published · modified · JSON