This vulnerability affects FeehiCMS version 2.1.1 and involves improper handling within the session management, authentication logic, and logout handler components, which can be leveraged by an attacker to escalate privileges. The CVSS 3.1 vector (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) indicates that the attack can be performed remotely over the network but requires high attack complexity and no privileges or user interaction. The impact is high on confidentiality and integrity, with no impact on availability. There is no vendor advisory or patch information available at this time.

Successful exploitation could allow an unauthenticated attacker to escalate privileges, potentially gaining unauthorized access to sensitive information or administrative functions within FeehiCMS 2.1.1. The confidentiality and integrity of the system are at high risk, but availability is not affected. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the affected version and monitoring for unusual authentication or session activity. Avoid deploying FeehiCMS version 2.1.1 in sensitive environments without additional compensating controls.