CVE-2022-34140

This exploit demonstrates an authenticated RCE vulnerability in Feehi CMS 2.1.1 by uploading a malicious PHP file disguised as an image. The attacker manipulates the file extension during upload to bypass restrictions.

This exploit demonstrates a stored XSS vulnerability in Feehi CMS 2.1.1 by injecting a malicious script into the username field during registration, which executes when viewing an article page.