CVE-2026-31352

An authenticated stored cross-site scripting (XSS) vulnerability in the Role Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Role Name parameter.

Score

CVSS 3.1 5.4 Medium

Status

Modified - cve@mitre.org

Published

2026-04-06

Last modified

2026-04-09

Weaknesses

CWE-79

Affected products

• Feehi Cms (Feehi)

References

• https://github.com/liufee/cms
• https://github.com/liufee/cms/issues/83