This vulnerability involves stored XSS in Feehi CMS v2.1.1 within the Role Management module. An attacker with authenticated access can inject crafted payloads into the Role Name parameter, which are then stored and executed when viewed by users. This can lead to arbitrary script execution within the application context. No CVSS score or remediation details have been published yet.

Successful exploitation allows authenticated attackers to execute arbitrary scripts or HTML in the context of the web application, potentially leading to session hijacking, defacement, or other client-side attacks. Since it requires authentication, the attack surface is limited to users with access to the Role Management functionality. There are no reports of active exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the Role Management module to trusted users only and consider additional input validation or sanitization controls if possible.