This vulnerability involves multiple stored XSS issues in the Permissions module of Feehi CMS v2.1.1. Authenticated attackers can inject crafted payloads into specific parameters (Group, Category, Description), which are then stored and rendered, enabling execution of arbitrary scripts or HTML in the context of users viewing the affected content. The vulnerability requires authentication and affects the specified version of Feehi CMS. No patch or official fix information is provided in the available data.

Successful exploitation could allow an authenticated attacker to execute arbitrary scripts in the context of other users, potentially leading to session hijacking, defacement, or other malicious actions within the CMS environment. The impact is limited to authenticated users who can access the vulnerable module. There is no indication of known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the Permissions module to trusted users only and consider implementing input validation or output encoding as a temporary mitigation.