This vulnerability in Feehi CMS v2.1.1 involves an authenticated stored XSS flaw in the content creation/editing module. Attackers with valid credentials can inject crafted payloads into the Content field, which are then stored and executed in the context of other users viewing the affected content. The CVSS 3.1 vector indicates network attack vector, low attack complexity, privileges required, user interaction required, and impacts on confidentiality and integrity but not availability.

Successful exploitation can lead to execution of arbitrary web scripts or HTML in users' browsers, potentially compromising user confidentiality and integrity of data within the CMS environment. The vulnerability does not impact availability. Because it requires authentication and user interaction, the risk is limited to users with access and those who view the injected content.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the content creation/editing module to trusted users only and consider implementing input validation or output encoding as a temporary mitigation. Monitor vendor communications for updates on patches or official mitigations.