FFengoffice

Products

Exploited and recent CVEs

• CVE-2026-90497 Low 3.5 Fengoffice Feng Office Task Title Output add_task.php getTitle cross site scripting 0.3%
• CVE-2026-90496 Medium 4.7 Fengoffice Feng Office Reorder Handlers MoreController.class.php update_dimension_order sql injection 0.3%
• CVE-2026-90495 High 7.3 Fengoffice Feng Office Legacy API CompanyWebsite.class.php instance->findAll sql injection 0.4%
• CVE-2025-5877 Medium 6.3 Fengoffice Feng Office Document Upload ApplicationDataObject.class.php xml external entity reference 0.5%
• CVE-2025-5433 Medium 6.3 Fengoffice Feng Office index.php sql injection 0.3%