This vulnerability involves stored XSS in Feehi CMS v2.1.1, specifically in the creation/editing module where the Title parameter is not properly sanitized. An authenticated attacker can inject malicious scripts or HTML that are stored and later executed in users' browsers when viewing affected content. No CVSS score or detailed technical exploit information is provided.

Successful exploitation allows an authenticated attacker to execute arbitrary scripts within the context of the web application, potentially leading to session hijacking, defacement, or other client-side attacks. The impact is limited to authenticated users who can access the vulnerable module. There is no information about exploitation in the wild or broader impact beyond script execution.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation is currently documented. Until a patch is available, restrict access to the creation/editing module to trusted users and consider input validation or sanitization controls if possible.