FeehiCMS version 2.1.1 has a Remote Code Execution via Unrestricted File Upload in Ad Management. FeehiCMS allows authenticated remote attackers to upload files that the server later executes (or stores an executable location) without sufficient validation, sanitization, or execution restrictions. An attacker can crafted PHP file and cause application web execute it, resulting code (RCE).