CVE-2025-15264 | FeehiCMS up to 2.1.1 TimThumb timthumb.php src server-side request forgery

Uncategorized
Yanac

A vulnerability, which was classified as critical, was found in FeehiCMS up to 2.1.1. Impacted is an unknown function of the file frontend/web/timthumb.php of the component TimThumb. Executing manipulation of the argument src can lead to server-side request forgery.

This vulnerability is tracked as CVE-2025-15264. The attack can be launched remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More