This vulnerability in Feehi CMS v2.1.1 involves an authenticated stored XSS flaw in the content creation/editing module. Attackers who can authenticate to the system can inject crafted payloads into the Content field, which are then stored and executed in the context of other users viewing that content. The vulnerability is published but lacks a CVSS score and no official remediation or patch information is available. The affected versions are not explicitly detailed beyond v2.1.1. No cloud service is involved, and no known exploits have been reported.

Successful exploitation allows an authenticated attacker to execute arbitrary JavaScript or HTML in the browsers of users who view the injected content. This can lead to session hijacking, defacement, or other client-side attacks depending on the payload. Since authentication is required, the attack surface is limited to users with access to the CMS. There is no indication of remote unauthenticated exploitation or broader system compromise from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict authenticated user privileges to trusted users only and consider implementing input validation or output encoding on the Content field to mitigate stored XSS risks. Monitor vendor channels for updates and patches addressing this vulnerability.