Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An authenticated stored cross-site scripting (XSS) vulnerability in the Role Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Role Name parameter.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-31352 An authenticated stored cross-site scripting (XSS) vulnerability in the Role Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts o… https://www.cve.org/CVERecord?id=CVE-2026-31352
Post summary
The record discloses an authenticated stored XSS vulnerability (CVE-2026-31352) in Feehi CMS v2.1.1, without any PoC, exploit code, active exploitation notice, or patch details.
🚨*CVE* CVE-2026-31352 An authenticated stored cross-site scripting (XSS) vulnerability in the Role Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts o… https://www.cve.org/CVERecord?id=CVE-2026-31352 ----- Traducción: CVE-2026-31352 Una… http://infoflow.cloud`
Post summary
The tweet announces CVE‑2026‑31352 as an authenticated stored XSS in Feehi CMS v2.1.1, but provides no PoC, exploit, or mitigation information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | feehi | feehi_cms | 2.1.1 | - | - |