CVE-2026-31313 is an authenticated stored XSS vulnerability affecting Feehi CMS version 2.1.1. The vulnerability exists in the creation/editing module where an attacker with privileges to create or edit content can inject crafted payloads into the Content field. When other users access the affected content, the malicious scripts or HTML execute in their browsers, potentially leading to information disclosure or session hijacking. The CVSS vector indicates network attack vector, low attack complexity, privileges required, user interaction required, and a scope change with limited confidentiality and integrity impact but no availability impact. No patch or official remediation level has been published as of the data provided.

An attacker with authenticated access to the content creation or editing functionality can inject malicious scripts that execute in the browsers of other users who view the compromised content. This can lead to limited confidentiality and integrity impacts such as theft of user credentials or manipulation of displayed content. There is no impact on system availability. The vulnerability requires attacker privileges and user interaction to exploit.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict content creation/editing privileges to trusted users only and consider implementing additional input validation or output encoding controls at the application level to mitigate stored XSS risks.