Executive brief
FeehiCMS Has a Remote Code Execution via Unrestricted File Upload in Ad Management
Affected products
- Packagist feehi/cms
Junglewise Threat Intelligence
CVE-2025-65657: FeehiCMS Has a Remote Code Execution via Unrestricted File Upload in Ad Management
CVE-2025-65657 · Severity: low · CVSS 3.1 · Published 2025-12-02
Technologies: feehi/cms (Packagist). Vendors: Packagist.
Related threats
- Feehi CMS has authenticated stored cross-site scripting (XSS) vulnerabilities via the Permissions module
- Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the creation/editing module
- Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the Role Management module
- Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the Page Sign parameter
- Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the Category module