CVE-2025-63522: FeehiCMS is vulnerable to reverse tabnabbing

December 1, 2025 (updated December 2, 2025)

Reverse Tabnabbing vulnerability in FeehiCMS 2.1.1 in the Comments Management function

References

github.com/advisories/GHSA-w756-rf26-7rmr
github.com/kiwi865/CVEs/blob/main/CVE-2025-63522.md
github.com/liufee/cms
github.com/liufee/cms/issues/76
nvd.nist.gov/vuln/detail/CVE-2025-63522

Code Behaviors & Features

Detect and mitigate CVE-2025-63522 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →