{"schema_version":1,"title":"Feehi vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 11 vulnerabilities in Feehi: 0 in the last 7 days and 3 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-95265, was published on 5 October 2026. Nothing in the last four weeks, down from 3 vulnerabilities in the four before. 2 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/feehi","json_url":"https://junglewise.ai/threats/vendors/feehi.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/feehi","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":true,"counts":{"high":1,"all_time":11,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":3,"last_365_days":11},"latest":[{"cve":"CVE-2026-95265","slug":"cve-2026-95265-feehi-cms-2-1-1-contains-a-server-side-request-forgery-ssrf","title":"Feehi CMS SSRF in UEditor catchimage endpoint","severity":"info","exploited":false,"published_at":"2026-10-05T20:17:29.313+00:00","url":"https://junglewise.ai/threats/cve-2026-95265-feehi-cms-2-1-1-contains-a-server-side-request-forgery-ssrf"},{"cve":"CVE-2026-95264","slug":"cve-2026-95264-feehi-cms-2-1-1-is-vulnerable-to-directory-traversal-an","title":"Feehi CMS directory traversal arbitrary file deletion","severity":"info","exploited":false,"published_at":"2026-10-05T20:17:29.187+00:00","url":"https://junglewise.ai/threats/cve-2026-95264-feehi-cms-2-1-1-is-vulnerable-to-directory-traversal-an"},{"cve":"CVE-2026-95263","slug":"cve-2026-95263-feehi-cms-2-1-1-is-vulnerable-to-incorrect-access-control-a-low","title":"Feehi CMS insufficient access control in administrator password change","severity":"info","exploited":false,"published_at":"2026-10-05T20:17:29.05+00:00","url":"https://junglewise.ai/threats/cve-2026-95263-feehi-cms-2-1-1-is-vulnerable-to-incorrect-access-control-a-low"},{"cve":"CVE-2026-13546","cvss":7.3,"slug":"cve-2026-13546-feehi-cms-missing-authentication-in-rest-api-article-endpoint","title":"Feehi CMS missing authentication in REST API article endpoint","severity":"high","exploited":false,"published_at":"2026-06-29T09:16:27.39+00:00","url":"https://junglewise.ai/threats/cve-2026-13546-feehi-cms-missing-authentication-in-rest-api-article-endpoint"},{"cve":"CVE-2026-13544","cvss":6.3,"slug":"cve-2026-13544-feehi-cms-improper-access-control-in-usercontroller-api","title":"Feehi CMS improper access control in UserController API","severity":"medium","exploited":false,"published_at":"2026-06-29T07:16:24.93+00:00","url":"https://junglewise.ai/threats/cve-2026-13544-feehi-cms-improper-access-control-in-usercontroller-api"},{"cve":"CVE-2026-31313","cvss":5.4,"epss":0.0022,"slug":"cve-2026-31313-feehi-cms-stored-xss-in-article-content-module","title":"Feehi CMS stored XSS in article content module","severity":"medium","exploited":false,"published_at":"2026-04-06T17:17:09.59+00:00","url":"https://junglewise.ai/threats/cve-2026-31313-feehi-cms-stored-xss-in-article-content-module"},{"cve":"CVE-2026-31350","cvss":5.4,"epss":0.0018,"slug":"cve-2026-31350-feehi-cms-has-an-authenticated-stored-cross-site-scripting-xss","title":"Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the Page Sign parameter","severity":"medium","exploited":false,"published_at":"2026-04-06T16:16:32.807+00:00","url":"https://junglewise.ai/threats/cve-2026-31350-feehi-cms-has-an-authenticated-stored-cross-site-scripting-xss"},{"cve":"CVE-2025-65657","cvss":6.5,"epss":0.0043,"slug":"cve-2025-65657-feehicms-has-a-remote-code-execution-via-unrestricted-file-upload","title":"FeehiCMS Has a Remote Code Execution via Unrestricted File Upload in Ad Management","severity":"medium","exploited":false,"published_at":"2025-12-02T21:15:53.063+00:00","url":"https://junglewise.ai/threats/cve-2025-65657-feehicms-has-a-remote-code-execution-via-unrestricted-file-upload"},{"cve":"CVE-2025-63523","cvss":6.5,"epss":0.0028,"slug":"cve-2025-63523-feehicms-fails-to-enforce-server-side-immutability","title":"FeehiCMS fails to enforce server-side immutability","severity":"medium","exploited":false,"published_at":"2025-12-01T15:15:50.973+00:00","url":"https://junglewise.ai/threats/cve-2025-63523-feehicms-fails-to-enforce-server-side-immutability"},{"cve":"CVE-2025-63522","cvss":4.6,"epss":0.0021,"slug":"cve-2025-63522-feehicms-is-vulnerable-to-reverse-tabnabbing","title":"Reverse Tabnabbing vulnerability in FeehiCMS 2.1.1 in the Comments Management function","severity":"medium","exploited":false,"published_at":"2025-12-01T15:15:50.847+00:00","url":"https://junglewise.ai/threats/cve-2025-63522-feehicms-is-vulnerable-to-reverse-tabnabbing"},{"cve":"CVE-2025-63520","cvss":6.1,"epss":0.0026,"slug":"cve-2025-63520-feehicms-is-vulnerable-to-cross-site-scripting-via-the-id","title":"Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function (?r=user%2Fupdate).","severity":"medium","exploited":false,"published_at":"2025-12-01T15:15:50.713+00:00","url":"https://junglewise.ai/threats/cve-2025-63520-feehicms-is-vulnerable-to-cross-site-scripting-via-the-id"}],"vendor":{"hub":true,"name":"Feehi","slug":"feehi","homepage":"http://www.feehi.com/","description":"Feehi is a software developer known for creating the FeehiCMS content management system.","url":"https://junglewise.ai/threats/vendors/feehi"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-13546","cvss":7.3,"slug":"cve-2026-13546-feehi-cms-missing-authentication-in-rest-api-article-endpoint","title":"Feehi CMS missing authentication in REST API article endpoint","severity":"high","exploited":false,"published_at":"2026-06-29T09:16:27.39+00:00","url":"https://junglewise.ai/threats/cve-2026-13546-feehi-cms-missing-authentication-in-rest-api-article-endpoint"},{"cve":"CVE-2025-65657","cvss":6.5,"epss":0.0043,"slug":"cve-2025-65657-feehicms-has-a-remote-code-execution-via-unrestricted-file-upload","title":"FeehiCMS Has a Remote Code Execution via Unrestricted File Upload in Ad Management","severity":"medium","exploited":false,"published_at":"2025-12-02T21:15:53.063+00:00","url":"https://junglewise.ai/threats/cve-2025-65657-feehicms-has-a-remote-code-execution-via-unrestricted-file-upload"},{"cve":"CVE-2025-63523","cvss":6.5,"epss":0.0028,"slug":"cve-2025-63523-feehicms-fails-to-enforce-server-side-immutability","title":"FeehiCMS fails to enforce server-side immutability","severity":"medium","exploited":false,"published_at":"2025-12-01T15:15:50.973+00:00","url":"https://junglewise.ai/threats/cve-2025-63523-feehicms-fails-to-enforce-server-side-immutability"},{"cve":"CVE-2026-13544","cvss":6.3,"slug":"cve-2026-13544-feehi-cms-improper-access-control-in-usercontroller-api","title":"Feehi CMS improper access control in UserController API","severity":"medium","exploited":false,"published_at":"2026-06-29T07:16:24.93+00:00","url":"https://junglewise.ai/threats/cve-2026-13544-feehi-cms-improper-access-control-in-usercontroller-api"},{"cve":"CVE-2025-63520","cvss":6.1,"epss":0.0026,"slug":"cve-2025-63520-feehicms-is-vulnerable-to-cross-site-scripting-via-the-id","title":"Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function (?r=user%2Fupdate).","severity":"medium","exploited":false,"published_at":"2025-12-01T15:15:50.713+00:00","url":"https://junglewise.ai/threats/cve-2025-63520-feehicms-is-vulnerable-to-cross-site-scripting-via-the-id"},{"cve":"CVE-2026-31313","cvss":5.4,"epss":0.0022,"slug":"cve-2026-31313-feehi-cms-stored-xss-in-article-content-module","title":"Feehi CMS stored XSS in article content module","severity":"medium","exploited":false,"published_at":"2026-04-06T17:17:09.59+00:00","url":"https://junglewise.ai/threats/cve-2026-31313-feehi-cms-stored-xss-in-article-content-module"},{"cve":"CVE-2026-31350","cvss":5.4,"epss":0.0018,"slug":"cve-2026-31350-feehi-cms-has-an-authenticated-stored-cross-site-scripting-xss","title":"Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the Page Sign parameter","severity":"medium","exploited":false,"published_at":"2026-04-06T16:16:32.807+00:00","url":"https://junglewise.ai/threats/cve-2026-31350-feehi-cms-has-an-authenticated-stored-cross-site-scripting-xss"},{"cve":"CVE-2025-63522","cvss":4.6,"epss":0.0021,"slug":"cve-2025-63522-feehicms-is-vulnerable-to-reverse-tabnabbing","title":"Reverse Tabnabbing vulnerability in FeehiCMS 2.1.1 in the Comments Management function","severity":"medium","exploited":false,"published_at":"2025-12-01T15:15:50.847+00:00","url":"https://junglewise.ai/threats/cve-2025-63522-feehicms-is-vulnerable-to-reverse-tabnabbing"},{"cve":"CVE-2026-95265","slug":"cve-2026-95265-feehi-cms-2-1-1-contains-a-server-side-request-forgery-ssrf","title":"Feehi CMS SSRF in UEditor catchimage endpoint","severity":"info","exploited":false,"published_at":"2026-10-05T20:17:29.313+00:00","url":"https://junglewise.ai/threats/cve-2026-95265-feehi-cms-2-1-1-contains-a-server-side-request-forgery-ssrf"},{"cve":"CVE-2026-95264","slug":"cve-2026-95264-feehi-cms-2-1-1-is-vulnerable-to-directory-traversal-an","title":"Feehi CMS directory traversal arbitrary file deletion","severity":"info","exploited":false,"published_at":"2026-10-05T20:17:29.187+00:00","url":"https://junglewise.ai/threats/cve-2026-95264-feehi-cms-2-1-1-is-vulnerable-to-directory-traversal-an"}],"generated_at":"2026-11-12T03:07:00.164048+00:00","technologies":[{"name":"Feehi CMS","slug":"feehi-cms","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/feehi-cms"},{"name":"Feehicms","slug":"feehi-feehicms-1","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/feehi-feehicms-1"}]}