https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T15:23:12.837298+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2024-37609 cnvd-2024-37609 2026-10-10T15:23:12.840014+00:00 cnvd-2024-37609 https://cve.radiocsirt.org/vuln/euvd-2026-160527 EUVD-2026-160527 2026-10-10T15:23:12.840049+00:00 EUVD-2026-160527 https://cve.radiocsirt.org/vuln/fkie_cve-2024-8295 fkie_cve-2024-8295 2026-10-10T15:23:12.840063+00:00

A vulnerability has been found in FeehiCMS up to 2.1.1 and classified as critical. This vulnerability affects the function createBanner of the file /admin/index.php?r=banner%2Fbanner-create. The manipulation of the argument BannerForm[img] leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

 https://cve.radiocsirt.org/vuln/ghsa-3wrg-6mg5-jg2v GHSA-3wrg-6mg5-jg2v — FeehiCMS BannerForm[img] unrestricted upload 2026-10-10T15:23:12.840092+00:00

Affected: Packagist: feehi/cms

A vulnerability has been found in FeehiCMS up to 2.1.1 and classified as critical. This vulnerability affects the function createBanner of the file /admin/index.php?r=banner%2Fbanner-create. The manipulation of the argument BannerForm[img] leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.