https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-15264.htmlhttps://patchthecve.com/cve/CVE-2025-15264.htmlWed, 17 Jun 2026 08:37:29 +0000HIGH 7.3: A vulnerability was determined in FeehiCMS up to 2.1.1. Impacted is an unknown function of the file frontend/web/timthumb.php of the component TimThumb. Executing manipulation of the argument src can lead to server-side request forgery. The attack can be launched remotely. The exploit has been publihttps://patchthecve.com/cve/CVE-2025-65657.htmlhttps://patchthecve.com/cve/CVE-2025-65657.htmlWed, 17 Jun 2026 09:55:51 +0000MEDIUM 6.5: FeehiCMS version 2.1.1 has a Remote Code Execution via Unrestricted File Upload in Ad Management. FeehiCMS version 2.1.1 allows authenticated remote attackers to upload files that the server later executes (or stores in an executable location) without sufficient validation, sanitization, or executiohttps://patchthecve.com/cve/CVE-2024-8296.htmlhttps://patchthecve.com/cve/CVE-2024-8296.htmlWed, 17 Jun 2026 08:22:18 +0000MEDIUM 6.3: A vulnerability was found in FeehiCMS up to 2.1.1 and classified as critical. This issue affects the function insert of the file /admin/index.php?r=user%2Fcreate. The manipulation of the argument User[avatar] leads to unrestricted upload. The attack may be initiated remotely. The exploit has been dihttps://patchthecve.com/cve/CVE-2024-8295.htmlhttps://patchthecve.com/cve/CVE-2024-8295.htmlWed, 17 Jun 2026 08:22:18 +0000MEDIUM 6.3: A vulnerability has been found in FeehiCMS up to 2.1.1 and classified as critical. This vulnerability affects the function createBanner of the file /admin/index.php?r=banner%2Fbanner-create. The manipulation of the argument BannerForm[img] leads to unrestricted upload. The attack can be initiated rehttps://patchthecve.com/cve/CVE-2024-8294.htmlhttps://patchthecve.com/cve/CVE-2024-8294.htmlWed, 17 Jun 2026 08:22:18 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in FeehiCMS up to 2.1.1. This affects the function update of the file /admin/index.php?r=friendly-link%2Fupdate. The manipulation of the argument FriendlyLink[image] leads to unrestricted upload. It is possible to initiate the attack remot