Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. After an administrator logs in, open the administrator image upload page to potentially upload malicious files.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22643
Reference (s):
- https://github.com/liufee/cms/issues/51